Veille CVE

Mardi 20 octobre 2026

2 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « IBM Concert » ✕
  1. CVE-2026-3303 3.7 Faible

    IBM Concert

    IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.

  2. CVE-2025-64649 5.9 Moyenne

    IBM Concert

    IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation.