5.9
Medium
CVE-2025-36150 IBM Concert 1.0.0 through 2.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to…
Description
IBM Concert 1.0.0 through 2.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Concert 1.0 | 1.0.0 → 2.0.0 | No fix stated |
Other CVEs of Concert
The 62 CVEs of Concert →
CVE-2026-1501
IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation
3.7
Low
CVE-2026-1510
IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection
4.7
Medium
CVE-2026-3303
IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out…
3.7
Low
CVE-2026-3628
IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions
5.3
Medium