Veille CVE

Octobre 2026

9 CVE

Critique 0 Élevée 1 Moyenne 5 Faible 3 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « IBM Concert » ✕
  1. CVE-2026-6719 7.5 Élevée

    IBM Concert

    IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

  2. CVE-2026-4413 6.1 Moyenne

    IBM Concert

    IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

  3. CVE-2026-4405 4.0 Moyenne

    IBM Concert

    IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.

  4. CVE-2026-3628 5.3 Moyenne

    IBM Concert

    IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.

  5. CVE-2026-3303 3.7 Faible

    IBM Concert

    IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.

  6. CVE-2026-1510 4.7 Moyenne

    IBM Concert

    IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection.

  7. CVE-2026-1501 3.7 Faible

    IBM Concert

    IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.

  8. CVE-2026-6930 3.7 Faible

    IBM Concert

    IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

  9. CVE-2026-15661 5.3 Moyenne

    IBM Concert

    IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.