Ibm: >> Concert >> 1.0.4.1 Security Vulnerabilities
IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVSS Score
7.5
EPSS Score
0.003
Published
2026-10-19
IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.
CVSS Score
3.7
EPSS Score
0.002
Published
2026-10-19
IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.
CVSS Score
5.3
EPSS Score
0.003
Published
2026-10-19
IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.
CVSS Score
4.0
EPSS Score
0.002
Published
2026-10-19
IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score
6.1
EPSS Score
0.002
Published
2026-10-19
IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.
CVSS Score
3.7
EPSS Score
0.001
Published
2026-10-19
IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection.
CVSS Score
4.7
EPSS Score
0.001
Published
2026-10-19
IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVSS Score
3.7
EPSS Score
0.001
Published
2026-10-19
IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.
CVSS Score
5.3
EPSS Score
0.002
Published
2026-10-19
IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and increased attack surface.
CVSS Score
6.2
EPSS Score
0.001
Published
2026-09-24
Page 1