3.7
Low
CVE-2026-3303 IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out…
Description
IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Concert 1.0 | 1.0.0 → 3.0.0 | No fix stated |
Other CVEs of Concert
The 62 CVEs of Concert →
CVE-2026-1501
IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation
3.7
Low
CVE-2026-1510
IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection
4.7
Medium
CVE-2026-3628
IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions
5.3
Medium
CVE-2026-4405
IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system
4.0
Medium