Known vulnerabilities in IBM Concert Software - page 4

Vendor: IBM Corporation
Software: IBM Concert Software
Software CPE: cpe:2.3:a:ibm_corporation:ibm_concert_software:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 179
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Concert Software IBM Concert Software is affected by 179 known vulnerabilities: 1 critical, 27 high, 102 medium, 49 low Critical High Medium Low

Vulnerabilities (179)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111105 - Missing release of memory after effective lifetime
CVE-2025-47935		 CWE-401 High
No
No
 2.0.0 12.06.2025 SB2025061250
SB2025061252
SB2025062505
and 13 more
#VU108124 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-43859		 CWE-444 Medium
No
No
 2.0.0 02.05.2025 SB2025050214
SB2025050215
SB2025050216
and 24 more
#VU107889 - Improper input validation
CVE-2025-22872		 CWE-20 Low
No
No
 2.0.0 23.04.2025 SB2025042357
SB2025042413
SB2025042414
and 51 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871		 CWE-444 Medium
No
No
 2.0.0 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU106253 - Improper input validation
CVE-2025-22870		 CWE-20 Medium
Available
No
 2.0.0 30.03.2025 SB2025033001
SB2025033002
SB2025033003
and 106 more
#VU105984 - Inefficient Regular Expression Complexity
CVE-2025-27789		 CWE-1333 Low
No
No
 2.0.0 24.03.2025 SB2025032476
SB2025041020
SB2025041691
and 45 more
#VU105452 - Server-Side Request Forgery (SSRF)
CVE-2025-27152		 CWE-918 Medium
Available
No
 2.0.0 07.03.2025 SB2025030777
SB2025031918
SB2025032417
and 42 more
#VU103771 - Improper Authentication
CVE-2024-12797		 CWE-287 Medium
No
No
 1.1.0 11.02.2025 SB2025021187
SB20250211108
SB20250211159
and 60 more
#VU103502 - Use After Free
CVE-2022-49043		 CWE-416 Medium
No
No
 1.1.0 03.02.2025 SB2025020327
SB2025020330
SB2025020353
and 60 more
#VU103307 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-49293		 CWE-79 Medium
No
No
 2.0.0 27.01.2025 SB2025012706
SB2025012707
SB2025082202
#VU101972 - Security Features
CVE-2024-56326		 CWE-254 Low
No
No
 2.0.0 27.12.2024 SB2024122789
SB2024122790
SB2024122791
and 78 more
#VU101971 - Security Features
CVE-2024-56201		 CWE-254 Low
No
No
 2.0.0 27.12.2024 SB2024122789
SB2025010203
SB2025010322
and 62 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538		 CWE-185 Medium
No
No
 2.0.0 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU96744 - Type confusion
CVE-2024-6119		 CWE-843 Medium
No
No
 1.1.0 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 1.1.0 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU87734 - Resource exhaustion
CVE-2024-28863		 CWE-400 Medium
No
No
 1.1.0 22.03.2024 SB2024032234
SB2024052306
SB2024061114
and 30 more
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 2.0.0 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU77526 - Permissions, Privileges, and Access Controls
CVE-2023-2728		 CWE-264 Medium
Available
No
 1.1.0 19.06.2023 SB2023061947
SB2023061950
SB2023061951
and 15 more
#VU77525 - Permissions, Privileges, and Access Controls
CVE-2023-2727		 CWE-264 Medium
No
No
 1.1.0 19.06.2023 SB2023061947
SB2023061950
SB2023061951
and 15 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 1.1.0 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more


Showing elements 61 - 80 out of 179