Known vulnerabilities in IBM Concert Software 2.1.0 patch03

Vendor: IBM Corporation
Software: IBM Concert Software
Version: 2.1.0 patch03
Software CPE: cpe:2.3:a:ibm_corporation:ibm_concert_software:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 19
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Concert Software version 2.1.0 patch03 IBM Concert Software 2.1.0 patch03 is affected by 19 vulnerabilities: 6 high, 9 medium, 4 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-36019		 CWE-79 Low
No
No
 2.2.0 10.02.2026 SB2026021020
#VU122522 - Cross-Site Request Forgery (CSRF)
CVE-2025-36018		 CWE-352 Medium
No
No
 2.2.0 10.02.2026 SB2026021020
#VU122521 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-43178		 CWE-327 High
No
No
 2.2.0 10.02.2026 SB2026021020
#VU122520 - Server-Side Request Forgery (SSRF)
CVE-2025-36243		 CWE-918 Medium
No
No
 2.2.0 10.02.2026 SB2026021020
#VU122519 - Use of Hard-coded Credentials
CVE-2025-33089		 CWE-798 Medium
No
No
 2.2.0 10.02.2026 SB2026021020
#VU122518 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-6985		 CWE-611 High
No
No
 2.2.0 10.02.2026 SB2026021018
SB2026021020
SB2026032324
#VU122517 - Exposure of sensitive information to an unauthorized actor
CVE-2025-6984		 CWE-200 High
No
No
 2.2.0 10.02.2026 SB2026021017
SB2026021020
#VU122516 - Incorrect Permission Assignment for Critical Resource
CVE-2025-33088		 CWE-732 Low
No
No
 2.2.0 10.02.2026 SB2026021016
#VU122513 - Improper Clearing of Heap Memory Before Release ('Heap Inspection')
CVE-2025-33101		 CWE-244 High
No
No
 2.2.0 10.02.2026 SB2026021020
#VU118845 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-66034		 CWE-22 High
Public exploit available
No
 2.2.0 28.11.2025 SB2025112880
SB2025121314
SB2026012166
and 4 more
#VU117790 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-62727		 CWE-835 Medium
No
No
 2.2.0 29.10.2025 SB2025102946
SB2025102949
SB2025102950
and 11 more
#VU117332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-59343		 CWE-22 High
No
No
 2.2.0 17.10.2025 SB2025101702
SB2025101703
SB2025101704
and 22 more
#VU116213 - Out-of-bounds write
CVE-2025-9230		 CWE-787 Medium
No
No
 2.2.0 01.10.2025 SB2025100119
SB2025100132
SB2025100133
and 108 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 2.2.0 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 45 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 2.2.0 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU113811 - Exposure of resource to wrong sphere
CVE-2025-49574		 CWE-668 Low
No
No
 2.2.0 12.08.2025 SB2025081226
SB2025100107
SB2025100114
and 9 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 2.2.0 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 181 more
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 2.2.0 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU86800 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-4218		 CWE-611 Low
No
No
 2.2.0 26.02.2024 SB2024022642
SB2024030105
SB2024032906
and 11 more