Known vulnerabilities in IBM Concert Software - page 2

Vendor: IBM Corporation
Software: IBM Concert Software
Software CPE: cpe:2.3:a:ibm_corporation:ibm_concert_software:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 179
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Concert Software IBM Concert Software is affected by 179 known vulnerabilities: 1 critical, 27 high, 102 medium, 49 low Critical High Medium Low

Vulnerabilities (179)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115000 - Access of Uninitialized Pointer
CVE-2025-1761		 CWE-824 High
No
No
 - 09.09.2025 SB2025090917
#VU114354 - Missing Origin Validation in WebSockets
CVE-2025-24964		 CWE-1385 High
No
No
 2.0.0 22.08.2025 SB2025082201
SB2025082202
#VU114312 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-48050		 CWE-22 High
No
No
 2.0.0 20.08.2025 SB20250820123
SB20250820124
SB20250820125
and 15 more
#VU113227 - Uncaught Exception
CVE-2025-48997		 CWE-248 Medium
No
No
 2.0.0 25.07.2025 SB2025072557
SB2025072558
SB2025082202
and 9 more
#VU105862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-57965		 CWE-79 Medium
No
No
 2.0.0 19.03.2025 SB2025031916
SB2025031918
SB2025050262
and 14 more
#VU105723 - Stack-based buffer overflow
CVE-2024-8176		 CWE-121 High
No
No
 2.0.0 14.03.2025 SB2025031426
SB2025031429
SB2025031430
and 105 more
#VU105451 - Out-of-bounds write
CVE-2025-26519		 CWE-787 High
No
No
 2.0.0 07.03.2025 SB2025030747
SB2025030769
SB2025030770
and 3 more
#VU104099 - Use After Free
CVE-2024-56171		 CWE-416 High
No
No
 2.0.0 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928		 CWE-121 High
No
No
 2.0.0 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104044 - Resource exhaustion
CVE-2024-12243		 CWE-400 Medium
No
No
 2.0.0 18.02.2025 SB2025021831
SB2025021832
SB2025021835
and 65 more
#VU103687 - Memory corruption
CVE-2025-0395		 CWE-119 Medium
No
No
 2.0.0 06.02.2025 SB2025020664
SB2025020667
SB2025020668
and 66 more
#VU103600 - Covert Timing Channel
CVE-2024-13176		 CWE-385 Medium
No
No
 2.0.0 04.02.2025 SB2025020454
SB2025020456
SB2025020656
and 59 more
#VU101910 - Out-of-bounds read
CVE-2024-53150		 CWE-125 High
No
No
 2.0.0 27.12.2024 SB2024122704
SB2025010314
SB2025010315
and 92 more
#VU101894 - Insufficient Technical Documentation
CVE-2024-51744		 CWE-1059 Low
No
No
 2.0.0 23.12.2024 SB2024122304
SB2024122309
SB20241230139
and 21 more
#VU96945 - Resource exhaustion
CVE-2024-7592		 CWE-400 Medium
No
No
 2.0.0 09.09.2024 SB2024090916
SB2024090917
SB2024090918
and 72 more
#VU96642 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43788		 CWE-79 Low
No
No
 2.0.0 30.08.2024 SB2024083026
SB2024100824
SB2024100825
and 21 more
#VU96147 - Improper Locking
CVE-2024-43855		 CWE-667 Low
No
No
 2.0.0 19.08.2024 SB2024081988
SB2024091080
SB20240910112
and 23 more
#VU92405 - Uncontrolled Memory Allocation
CVE-2024-4068		 CWE-789 Medium
No
No
 2.0.0 20.06.2024 SB20240620121
SB2024062833
SB2024070809
and 51 more
#VU87197 - Resource exhaustion
CVE-2023-45290		 CWE-400 Medium
No
No
 2.0.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU9687 - Memory corruption
CVE-2017-9047		 CWE-119 Low
No
No
 2.0.0 19.12.2017 SB2017121308
SB2017111019
SB2022110928
and 29 more


Showing elements 21 - 40 out of 179