| CVE-2025-36083 |
IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to…
|
6.2
Medium
|
Oct 28, 2025 |
| CVE-2025-36081 |
IBM Concert Software 1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of…
|
5.3
Medium
|
Oct 28, 2025 |
| CVE-2025-1761 |
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated…
|
5.9
Medium
|
Sep 8, 2025 |
| CVE-2025-0656 |
IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting
|
6.1
Medium
|
Sep 1, 2025 |
| CVE-2025-33082 |
IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Sep 1, 2025 |
| CVE-2025-33083 |
IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Sep 1, 2025 |
| CVE-2025-33084 |
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information, caused by the…
|
5.9
Medium
|
Sep 1, 2025 |
| CVE-2025-33099 |
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to perform unauthorized actions using man in…
|
5.9
Medium
|
Sep 1, 2025 |
| CVE-2025-33102 |
IBM Concert Software 1.0.0 through 1.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker…
|
5.9
Medium
|
Sep 1, 2025 |
| CVE-2025-33100 |
IBM Concert Software 1.0.0 through 1.1.0 contains hard-coded credentials, such as a password or cryptographic key,…
|
6.2
Medium
|
Aug 18, 2025 |
| CVE-2025-33090 |
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to cause a denial of service using a specially…
|
7.5
High
|
Aug 18, 2025 |
| CVE-2025-27909 |
IBM Concert Software 1.0.0 through 1.1.0 uses cross-origin resource sharing (CORS) which could allow an attacker to…
|
5.4
Medium
|
Aug 18, 2025 |
| CVE-2025-1759 |
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated…
|
5.9
Medium
|
Aug 18, 2025 |
| CVE-2024-49827 |
IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to excessive data exposure, allowing attackers to access…
|
3.7
Low
|
Aug 18, 2025 |
| CVE-2024-55910 |
IBM Concert Software 1.0.0 through 1.0.5 is vulnerable to server-side request forgery (SSRF)
|
6.5
Medium
|
May 2, 2025 |
| CVE-2024-55913 |
IBM Concert Software 1.0.0 through 1.0.5 could allow a remote attacker to traverse directories on the system
|
5.3
Medium
|
May 2, 2025 |
| CVE-2024-55912 |
IBM Concert Software 1.0.0 through 1.0.5 uses weaker than expected cryptographic algorithms that could allow an attacker…
|
5.9
Medium
|
May 2, 2025 |
| CVE-2024-55909 |
IBM Concert Software 1.0.0 through 1.0.5 could allow an authenticated user to cause a denial of service due to the…
|
6.5
Medium
|
May 2, 2025 |
| CVE-2024-51476 |
IBM Concert Software 1.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute…
|
7.5
High
|
Mar 6, 2025 |
| CVE-2024-41757 |
IBM Concert Software 1.0.0 and 1.0.1 could allow a remote attacker to obtain sensitive information, caused by the…
|
5.9
Medium
|
Jan 24, 2025 |
| CVE-2024-49354 |
IBM Concert 1.0.0, 1.0.1, and 1.0.2 is vulnerable to sensitive information disclosure through specially crafted API…
|
5.3
Medium
|
Jan 18, 2025 |
| CVE-2024-52893 |
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow a remote attacker to obtain sensitive…
|
5.3
Medium
|
Jan 7, 2025 |
| CVE-2024-52366 |
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow a remote attacker to obtain sensitive…
|
5.9
Medium
|
Jan 7, 2025 |
| CVE-2024-52891 |
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow an authenticated user to inject malicious…
|
5.4
Medium
|
Jan 7, 2025 |
| CVE-2024-52367 |
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could disclose sensitive system information to an…
|
5.3
Medium
|
Jan 7, 2025 |