CS
Product
Concert Software
92
CVEs
0
On KEV
9.8
Max CVSS
9
New 30D
Severity mix
Critical 8High 25Medium 55Low 4
Watch
Add Concert Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-41785 | 6.1 | Nov 15 | IBM Concert Software 1.0.0 through 1.0.1 is vulnerable to cross-site scripting Affected: 1.0.0; 1.0.1 |
| CVE-2025-36084 | 5.9 | Sep 22 | Multiple Vulnerabilities in IBM Concert Software Affected: 1.0.0 through 3.0.0 |
| CVE-2025-64649 | 5.9 | Aug 28 | Multiple Vulnerabilities in IBM Concert Software Affected: 1.0.0 through 2.3.1 |
| CVE-2025-64648 | 5.9 | Mar 25 | Multiple Vulnerabilities in IBM Concert Software Affected: 1.0.0 through 2.2.0 |
| CVE-2025-33101 | 5.9 | Feb 17 | IBM Concert 1.0.0 through 2.1.0 could allow an attacker to obtain sensitive information using man in the middle techniques due to improper clearing of heap memory Affected: 1.0.0 before 2.2.0 |
| CVE-2025-36161 | 5.9 | Nov 20 | IBM Concert 1.0.0 through 2.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict-Transport-Security Affected: 1.0.0 before 2.1.0 |
| CVE-2025-33099 | 5.9 | Sep 1 | IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation Affected: 1.0.0 before 2.0.0 |
| CVE-2025-33084 | 5.9 | Sep 1 | IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security Affected: 1.0.0 before 2.0.0 |
| CVE-2024-55912 | 5.9 | May 2 | IBM Concert Software 1.0.0 through 1.0.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 1.0.0 before 1.1.0 |
| CVE-2024-41757 | 5.9 | Jan 24 | IBM Concert Software 1.0.0 and 1.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security Affected: 1.0.0; 1.0.1 |
| CVE-2024-52366 | 5.9 | Jan 7 | IBM Concert Software information disclosure Affected: 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, 1.0.3 |
| CVE-2024-43189 | 5.9 | Nov 15 | IBM Concert Software 1.0.0 through 1.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security Affected: 1.0.0; 1.0.1 |
| CVE-2025-64646 | 5.5 | Mar 25 | Multiple Vulnerabilities in IBM Concert Software Affected: 1.0.0 through 2.2.0 |
| CVE-2025-36440 | 5.5 | Mar 25 | Multiple Vulnerabilities in IBM Concert Software Affected: 1.0.0 through 2.2.0 |
| CVE-2025-36438 | 5.5 | Mar 25 | Multiple Vulnerabilities in IBM Concert Software Affected: 1.0.0 through 2.2.0 |
| CVE-2025-12708 | 5.5 | Mar 25 | Multiple Vulnerabilities in IBM Concert Software Affected: 1.0.0 through 2.2.0 |
| CVE-2025-33081 | 5.5 | Feb 3 | IBM Concert 1.0.0 through 2.1.0 stores potentially sensitive information in log files that could be read by a local user Affected: 1.0.0 before 2.2.0 |
| CVE-2025-36159 | 5.5 | Nov 20 | IBM Concert 1.0.0 through 2.0.0 could allow a local user to forge log files to impersonate other users or hide their identity due to improper neutralization of output Affected: 1.0.0 before 2.1.0 |
| CVE-2025-36158 | 5.5 | Nov 20 | IBM Concert 1.0.0 through 2.0.0 could allow a local user with specific permission to obtain sensitive information from files due to uncontrolled recursive directory copying Affected: 1.0.0 before 2.1.0 |
| CVE-2025-36083 | 5.5 | Oct 28 | IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to improper clearing of heap memory before release Affected: 1.0.0 before 2.1.0 |
| CVE-2025-36149 | 5.4 | Nov 21 | IBM Concert Software 1.0.0 through 2.0.0 could allow a remote attacker to hijack the clicking action of the victim Affected: 1.0.0 before 2.1.0 |
| CVE-2025-36085 | 5.4 | Oct 28 | IBM Concert 1.0.0 through 2.0.0 Software is vulnerable to server-side request forgery (SSRF) Affected: 1.0.0 before 2.1.0 |
| CVE-2025-33083 | 5.4 | Sep 1 | IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting Affected: 1.0.0 before 2.0.0 |
| CVE-2025-33082 | 5.4 | Sep 1 | IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting Affected: 1.0.0 before 2.0.0 |
| CVE-2024-52891 | 5.4 | Jan 7 | IBM Concert Software log manipulation Affected: 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, 1.0.3 |
| CVE-2026-3628 | 5.3 | Oct 19 | IBM Concert Software Information Disclosure Affected: 1.0.0 through 3.0.0 |
| CVE-2026-15661 | 5.3 | Oct 19 | IBM Concert Software Improper Output Neutralization for Logs Affected: 1.0.0 through 3.0.0 |
| CVE-2026-6925 | 5.3 | Sep 23 | Multiple Vulnerabilities in IBM Concert Software Affected: 1.0.0 through 3.0.0 |
| CVE-2026-3626 | 5.3 | Sep 23 | Multiple Vulnerabilities in IBM Concert Software Affected: 1.0.0 through 3.0.0 |
| CVE-2025-12767 | 5.3 | Sep 22 | Multiple Vulnerabilities in IBM Concert Software Affected: 1.0.0 through 3.0.0 |
| CVE-2025-36081 | 5.3 | Oct 28 | IBM Concert Software 1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of log input Affected: 1.0.0 before 2.1.0 |
| CVE-2024-55913 | 5.3 | May 2 | IBM Concert Software 1.0.0 through 1.0.5 could allow a remote attacker to traverse directories on the system Affected: 1.0.0 before 1.1.0 |
| CVE-2024-52893 | 5.3 | Jan 7 | IBM Concert Software information disclosure Affected: 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, 1.0.3 |
| CVE-2026-1510 | 4.7 | Oct 19 | IBM Concert Software Improper Clearing of Heap Memory Affected: 1.0.0 through 3.0.0 |
| CVE-2026-6327 | 4.3 | Sep 23 | Multiple Vulnerabilities in IBM Concert Software Affected: 1.0.0 through 3.0.0 |
| CVE-2025-36243 | 4.3 | Feb 17 | IBM Concert 1.0.0 through 2.1.0 is vulnerable to server-side request forgery (SSRF) Affected: 1.0.0 before 2.2.0 |
| CVE-2024-43180 | 4.3 | Sep 13 | IBM Concert 1.0 does not set the secure attribute on authorization tokens or session cookies Affected: 1.0 |
| CVE-2026-4405 | 4.0 | Oct 19 | IBM Concert Software Use of Web Browser Cache Containing Sensitive Information Affected: 1.0.0 through 3.0.0 |
| CVE-2026-1501 | 3.7 | Oct 19 | IBM Concert Software Improper Certificate Validation Affected: 1.0.0 through 3.0.0 |
| CVE-2026-3303 | 3.7 | Oct 19 | IBM Concert Software Permissive Cross-domain Security Policy Affected: 1.0.0 through 3.0.0 |
| CVE-2026-6930 | 3.7 | Oct 19 | IBM Concert Software Risky Cryptographic Algorithm Affected: 1.0.0 through 3.0.0 |
| CVE-2024-43173 | 3.7 | Oct 22 | IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute Affected: 1.0.0; 1.0.1 |