IBM Concert 2.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:concert:2.0.0:*:*:*:*:*:*:*
part: a version: 2.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Concert (1dc25188-c22b-5d8f-8ec8-ebf101de6942) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36161 |
vulnerable | 2026-06-08 07:21:01.324296 |
IBM Concert Software Information Disclosure
MEDIUM (5.9)
IBM Concert 1.0.0 through 2.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict-Transport-Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Published: 2025-11-20T15:26:29.342Z
Updated: 2025-11-20T16:30:00.600Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36160 |
vulnerable | 2026-06-08 07:21:01.323878 |
IBM Concert Information Disclosure
MEDIUM (5.3)
IBM Concert 1.0.0 through 2.0.0 could disclose sensitive server information from HTTP response headers that could aid in further attacks against the system.
Published: 2025-11-20T21:15:35.003Z
Updated: 2025-11-20T21:34:12.859Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36159 |
vulnerable | 2026-06-08 07:21:01.323375 |
IBM Concert Improper Log Neutralization
MEDIUM (6.2)
IBM Concert 1.0.0 through 2.0.0 could allow a local user to forge log files to impersonate other users or hide their identity due to improper neutralization of output.
Published: 2025-11-20T21:17:47.926Z
Updated: 2025-11-20T21:36:49.144Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36158 |
vulnerable | 2026-06-08 07:21:01.323018 |
IBM Concert Information Disclosure
MEDIUM (5.1)
IBM Concert 1.0.0 through 2.0.0 could allow a local user with specific permission to obtain sensitive information from files due to uncontrolled recursive directory copying.
Published: 2025-11-20T21:19:26.619Z
Updated: 2025-11-20T21:36:03.920Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36153 |
vulnerable | 2026-06-08 07:21:01.258024 |
IBM Concert Cross-Site Scripting
MEDIUM (6.1)
IBM Concert 1.0.0 through 2.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-11-20T21:21:04.869Z
Updated: 2025-11-20T21:35:26.690Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36150 |
vulnerable | 2026-06-08 07:21:01.257558 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36149 |
vulnerable | 2026-06-08 07:21:01.256923 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36085 |
vulnerable | 2026-06-08 07:21:00.883663 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36083 |
vulnerable | 2026-06-08 07:21:00.882808 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36081 |
vulnerable | 2026-06-08 07:21:00.868418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.