Skip to content
Sign in
5.4 Medium

CVE-2024-52891 IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow an authenticated user to inject malicious…

Description

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow an authenticated user to inject malicious information or obtain information from log files due to improper log neutralization.

Affected products and versions

Product Affected versions Fixed in
Concert Software Versions not published

Other CVEs of Concert Software

The 30 CVEs of Concert Software →
CVE-2025-36083 IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to… 6.2 Medium CVE-2025-36081 IBM Concert Software 1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of… 5.3 Medium CVE-2025-1761 IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated… 5.9 Medium CVE-2025-0656 IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting 6.1 Medium
Track this CVE