Known vulnerabilities in IBM Concert Software - page 3

Vendor: IBM Corporation
Software: IBM Concert Software
Software CPE: cpe:2.3:a:ibm_corporation:ibm_concert_software:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 179
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Concert Software IBM Concert Software is affected by 179 known vulnerabilities: 1 critical, 27 high, 102 medium, 49 low Critical High Medium Low

Vulnerabilities (179)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114352 - Exposure of sensitive information to an unauthorized actor
CVE-2024-49827		 CWE-200 Medium
No
No
 2.0.0 22.08.2025 SB2025082202
#VU114351 - Use of Hard-coded Credentials
CVE-2025-33100		 CWE-798 Low
No
No
 2.0.0 22.08.2025 SB2025082202
#VU114350 - Inefficient Regular Expression Complexity
CVE-2025-33090		 CWE-1333 High
No
No
 2.0.0 22.08.2025 SB2025082202
#VU114349 - Overly Permissive Cross-domain Whitelist
CVE-2025-27909		 CWE-942 Medium
No
No
 2.0.0 22.08.2025 SB2025082202
#VU114340 - Insufficient Verification of Data Authenticity
CVE-2025-43865		 CWE-345 High
No
No
 2.0.0 21.08.2025 SB2025082136
SB2025082202
SB2025090231
#VU114339 - Improper Handling of Exceptional Conditions
CVE-2025-43864		 CWE-755 High
No
No
 2.0.0 21.08.2025 SB2025082135
SB2025082202
SB2025090231
#VU114336 - Improper Clearing of Heap Memory Before Release ('Heap Inspection')
CVE-2025-1759		 CWE-244 High
No
No
 2.0.0 21.08.2025 SB2025082202
#VU113003 - Heap-based Buffer Overflow
CVE-2025-48379		 CWE-122 Low
No
No
 2.0.0 16.07.2025 SB20250716130
SB2025082202
SB2025091519
and 2 more
#VU112049 - Improper Access Control
CVE-2025-31486		 CWE-284 Medium
No
No
 2.0.0 30.06.2025 SB2025063016
SB2025063017
SB2025082202
#VU111977 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-29409		 CWE-94 Low
No
No
 2.0.0 26.06.2025 SB2025062651
SB2025063009
SB2025082202
and 1 more
#VU111106 - Uncaught Exception
CVE-2025-47944		 CWE-248 Medium
No
No
 2.0.0 12.06.2025 SB2025061251
SB2025061252
SB2025062505
and 12 more
#VU107489 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-53382		 CWE-94 Low
No
No
 2.0.0 16.04.2025 SB2025041637
SB2025041638
SB2025043033
and 8 more
#VU106382 - Exposure of sensitive information to an unauthorized actor
CVE-2025-31125		 CWE-200 Medium
Available
Exploited
 2.0.0 02.04.2025 SB2025040214
SB2025081104
SB2025082202
#VU106282 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-12905		 CWE-59 High
No
No
 2.0.0 31.03.2025 SB2025033140
SB2025033150
SB2025033151
and 15 more
#VU105799 - Integer overflow
CVE-2024-40635		 CWE-190 Low
No
No
 2.0.0 17.03.2025 SB20250317125
SB2025031862
SB2025032001
and 19 more
#VU105461 - Resource exhaustion
CVE-2025-22868		 CWE-400 Medium
No
No
 2.0.0 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU105387 - Improper input validation
CVE-2025-27516		 CWE-20 Low
No
No
 2.0.0 06.03.2025 SB2025030628
SB2025031001
SB2025031002
and 83 more
#VU103980 - Resource exhaustion
CVE-2024-12133		 CWE-400 Medium
No
No
 2.0.0 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU103946 - Incorrect Comparison
CVE-2024-53861		 CWE-697 Low
No
No
 2.0.0 13.02.2025 SB2025021309
SB2025021320
SB2025082202
and 1 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681		 CWE-200 Medium
Available
No
 2.0.0 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more


Showing elements 41 - 60 out of 179