CVE-2026-6719

IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2026-3303

IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing CORS which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains...

CVE-2026-4405

IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system...

CVE-2026-3628

IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions...

CVE-2026-4413

IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2026-1501

IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation...

CVE-2026-1510

IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection...

EUVD-2026-104534

IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation...

CVE-2026-1501 IBM Concert Software Improper Certificate Validation

IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation...

CVE-2026-1501 IBM Concert Software Improper Certificate Validation

IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation...

CVE-2026-1501

IBM Concert versions 1.0 through 3.0.0 are vulnerable to Improper Certificate Validation (CWE-295). The vulnerability allows for potential impact on confidentiality and integrity with low severity, as the attack requires low privileges and user interaction. No specific root cause, exploit details...

CVE-2026-1510 IBM Concert Software Improper Clearing of Heap Memory

IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection...

EUVD-2026-104533

IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection...

CVE-2026-1510 IBM Concert Software Improper Clearing of Heap Memory

IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection...

CVE-2026-1510

IBM Concert versions 1.0 through 3.0.0 are vulnerable to Information Disclosure via Heap Inspection . The root cause is the improper clearing of heap memory before it is released (CWE-244). This vulnerability allows for potential sensitive data exposure. No specific remediation details or exploit...

CVE-2026-3303 IBM Concert Software Permissive Cross-domain Security Policy

IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing CORS which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains...

EUVD-2026-104532

IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing CORS which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains...

CVE-2026-3303

IBM Concert Software versions 1.0 through 3.0.0 are vulnerable to a permissive cross-domain security policy due to how it implements cross-origin resource sharing (CORS) . The software fails to limit domain names to only trusted domains, which could allow an attacker to perform privileged actions...

CVE-2026-3628 IBM Concert Software Information Disclosure

IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions...

CVE-2026-3628

IBM Concert versions 1.0 through 3.0.0 are vulnerable to an information disclosure flaw caused by the exposure of schema suggestions . This vulnerability is associated with CWE-209 (Generation of Error Message Containing Sensitive Information). The impact is classified as LOW confidentiality with...