Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:concert:2.1.0:*:*:*:*:*:*:*

part: a version: 2.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductConcert (1dc25188-c22b-5d8f-8ec8-ebf101de6942)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-64645 vulnerable 2026-06-08 07:39:20.004779 Multiple Vulnerabilities in IBM Concert Software.
HIGH (7.7)
IBM Concert 1.0.0 through 2.1.0 could allow a local user to escalate their privileges due to a race condition of a symbolic link.
Published: 2025-12-26T14:24:57.880Z
Updated: 2026-02-26T16:07:23.639Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36253 vulnerable 2026-06-08 07:21:01.532650 Multiple Vulnerabilities in IBM Concert Software.
MEDIUM (5.9)
IBM Concert 1.0.0 through 2.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Published: 2026-02-02T21:52:55.260Z
Updated: 2026-02-04T16:54:04.031Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36243 vulnerable 2026-06-08 07:21:01.507825 Multiple Vulnerabilities in IBM Concert Software.
MEDIUM (5.4)
IBM Concert 1.0.0 through 2.1.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Published: 2026-02-17T18:56:44.280Z
Updated: 2026-03-10T17:09:05.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36154 vulnerable 2026-06-08 07:21:01.258549 IBM Concert Software Cleartext Storage in a File or on Disk.
MEDIUM (6.2)
IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user.
Published: 2025-12-24T19:01:48.161Z
Updated: 2025-12-24T20:02:34.098Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36019 vulnerable 2026-06-08 07:21:00.452485 Multiple Vulnerabilities in IBM Concert Software.
MEDIUM (6.1)
IBM Concert 1.0.0 through 2.1.0 for Z hub framework is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-02-17T18:53:09.408Z
Updated: 2026-02-17T19:57:36.512Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36018 vulnerable 2026-06-08 07:21:00.450639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33101 vulnerable 2026-06-08 07:19:01.747490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33089 vulnerable 2026-06-08 07:19:01.713505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33088 vulnerable 2026-06-08 07:19:01.712917 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33081 vulnerable 2026-06-08 07:19:01.709379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33015 vulnerable 2026-06-08 07:19:01.386256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1722 vulnerable 2026-06-08 07:08:37.903157 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1721 vulnerable 2026-06-08 07:08:37.902749 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1719 vulnerable 2026-06-08 07:08:37.901278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12771 vulnerable 2026-06-08 07:04:30.792061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51451 vulnerable 2026-06-08 06:52:12.005043 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43181 vulnerable 2026-06-08 06:45:49.751818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43178 vulnerable 2026-06-08 06:45:49.748722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.