CVE-2025-1719

IBM Concert Software versions 1.0.0–2.1.0 are affected by CVE-2025-1719 due to improper clearing of heap memory, which could allow a remote attacker to read sensitive information from allocated memory. The issue is documented across multiple sources (NVD/Red Hat/IBM) with IBM explicitly noting a ...

Security Bulletin: Multiple Vulnerabilities in IBM Concert Software

Summary Multiple vulnerabilities were addressed in IBM Concert Software version 2.2.0 Vulnerability Details CVEID:CVE-2025-6493 DESCRIPTION: A weakness has been identified in CodeMirror up to 5.65.20. Affected is an unknown function of the file mode/markdown/markdown.js of the component Markdown...

IBM Concert Information Disclosure Vulnerability

IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform, announced by IBM in May 2024 at the IBMThink conference in Boston, USA. IBM Concert suffers from an information disclosure vulnerability that stems from...

CVE-2024-41785

IBM Concert Software 1.0.0 through 1.0.1 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2025-1721

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

CVE-2025-12771 IBM Concert Software Improper Restriction of Operations within the Bounds of a Memory Buffer.

IBM Concert 1.0.0 through 2.1.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

CVE-2025-12771

CVE-2025-12771 affects IBM Concert software version 1.0.0–2.1.0. The vulnerability is a stack-based buffer overflow caused by improper bounds checking, allowing a local user to overflow a buffer and execute arbitrary code on the system. Red Hat and CIRCL entries corroborate the same description. ...

CVE-2025-1721 BM Concert Software Improper Clearing of Heap Memory Before Release.

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

PT-2025-53581

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 2.1.0 Description IBM Concert is susceptible to a stack-based buffer overflow due to insufficient bounds checking. A local user could exploit this to overflow a buffer and potentially execute arbitrary code o...

CVE-2025-36154 IBM Concert Software Cleartext Storage in a File or on Disk.

IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...

CVE-2025-36154

CVE-2025-36154 affects IBM Concert Software versions 1.0.0 through 2.1.0. Multiple connected sources confirm a cleartext information disclosure during recursive docker builds, enabling a local user to obtain sensitive data. The vulnerability stems from plaintext storage within docker build contex...

IBM Concert Software Heap Buffer Overflow Info Disclosure

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools is related to improper cleaning of dynamic memory. Exploiting this vulnerability can allow attackers to compromise the accessibility of protected information...

Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.

Summary Multiple vulnerabilities were addressed in IBM Concert Software version 2.2.0 Vulnerability Details CVEID:CVE-2025-36154 DESCRIPTION: IBM Concert Software stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user. CWE:CWE-313: Clearte...

IBM Concert Software SSRF

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...

IBM Concert Software AI Automation Tool Data Access

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the improper processing of output data for registration logs. Exploiting this vulnerability can allow a remote attacker to gain access to and modify this data...

IBM Concert Software AI Automation Code Execution

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

IBM Concert Software AI Automation Tool Output Processing

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tool is related to improper processing of output data for registration logs. Exploiting this vulnerability can allow attackers to impersonate other users...

IBM Concert Software Uncontrolled Recursion Unauthorized Access

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools is related to uncontrolled recursion. Exploiting this vulnerability could allow attackers to gain unauthorized access to protected information...

IBM Concert Software Information Disclosure

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the fact that system data can be disclosed to unauthorized individuals during the processing of HTTP headers. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to...

IBM Concert Software Clickjacking

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in improper restrictions on the visual layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...