356 matches found
Security Bulletin: Multiple Vulnerabilities in IBM Concert Software
Summary Multiple vulnerabilities were addressed in IBM Concert Software version 2.2.0 Vulnerability Details CVEID:CVE-2025-6493 DESCRIPTION: A weakness has been identified in CodeMirror up to 5.65.20. Affected is an unknown function of the file mode/markdown/markdown.js of the component Markdown...
IBM Concert Information Disclosure Vulnerability
IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform, announced by IBM in May 2024 at the IBMThink conference in Boston, USA. IBM Concert suffers from an information disclosure vulnerability that stems from...
CVE-2024-41785
IBM Concert Software 1.0.0 through 1.0.1 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2025-1721
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...
CVE-2025-12771 IBM Concert Software Improper Restriction of Operations within the Bounds of a Memory Buffer.
IBM Concert 1.0.0 through 2.1.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...
CVE-2025-12771
CVE-2025-12771 affects IBM Concert software version 1.0.0–2.1.0. The vulnerability is a stack-based buffer overflow caused by improper bounds checking, allowing a local user to overflow a buffer and execute arbitrary code on the system. Red Hat and CIRCL entries corroborate the same description. ...
CVE-2025-1721 BM Concert Software Improper Clearing of Heap Memory Before Release.
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...
PT-2025-53581
Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 2.1.0 Description IBM Concert is susceptible to a stack-based buffer overflow due to insufficient bounds checking. A local user could exploit this to overflow a buffer and potentially execute arbitrary code o...
CVE-2025-36154 IBM Concert Software Cleartext Storage in a File or on Disk.
IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...
CVE-2025-36154
CVE-2025-36154 affects IBM Concert Software versions 1.0.0 through 2.1.0. Multiple connected sources confirm a cleartext information disclosure during recursive docker builds, enabling a local user to obtain sensitive data. The vulnerability stems from plaintext storage within docker build contex...
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools, related to improper cleaning of dynamic memory, allows attackers to compromise the accessibility of protected information.
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools is related to improper cleaning of dynamic memory. Exploiting this vulnerability can allow attackers to compromise the accessibility of protected information...
Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.
Summary Multiple vulnerabilities were addressed in IBM Concert Software version 2.2.0 Vulnerability Details CVEID:CVE-2025-36154 DESCRIPTION: IBM Concert Software stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user. CWE:CWE-313: Clearte...
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tool lies in the improper processing of output data for registration logs, allowing a violator to gain access to read and modify this data.
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the improper processing of output data for registration logs. Exploiting this vulnerability can allow a remote attacker to gain access to and modify this data...
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the insufficient validation of requests on the server side, allowing attackers to execute SSRF attacks.
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools, related to the disclosure of system data by unauthorized individuals, allows attackers to gain unauthorized access to protected information.
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the fact that system data can be disclosed to unauthorized individuals during the processing of HTTP headers. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to...
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in its uncontrolled recursion, which allows attackers to gain unauthorized access to protected information.
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools is related to uncontrolled recursion. Exploiting this vulnerability could allow attackers to gain unauthorized access to protected information...
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the lack of protective measures for website structures. This allows attackers to gain unauthorized access to protected information and execute arbitrary code.
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tool lies in the improper processing of output data for registration logs, allowing attackers to impersonate other users.
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tool is related to improper processing of output data for registration logs. Exploiting this vulnerability can allow attackers to impersonate other users...
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the improper restriction on the visualized layers of the user interface. This allows attackers to carry out clickjacking attacks.
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in improper restrictions on the visual layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...