Veille CVE

Lundi 19 octobre 2026

8 CVE

Critique 0 Élevée 1 Moyenne 5 Faible 2 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « IBM Concert » ✕
  1. CVE-2026-6719 7.5 Élevée

    IBM Concert

    IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

  2. CVE-2026-4413 6.1 Moyenne

    IBM Concert

    IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

  3. CVE-2026-4405 4.0 Moyenne

    IBM Concert

    IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.

  4. CVE-2026-3628 5.3 Moyenne

    IBM Concert

    IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.

  5. CVE-2026-1510 4.7 Moyenne

    IBM Concert

    IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection.

  6. CVE-2026-1501 3.7 Faible

    IBM Concert

    IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.

  7. CVE-2026-6930 3.7 Faible

    IBM Concert

    IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

  8. CVE-2026-15661 5.3 Moyenne

    IBM Concert

    IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.