IBM Concert <3.0.0

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical7high5medium0low

updated 2026-10-28

vulnerabilities (45)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-55184US	—	66.6% (99th)	Exploit	no fix	2025-12-11	—
CVE-2026-24486US	high7.5	2.21% (82nd)	Exploit	no fix	2026-01-27	—
CVE-2025-67221US	—	0.63% (50th)	Exploit	no fix	2026-01-22	—
CVE-2026-27212US	high7.8	0.49% (42nd)	Exploit	no fix	2026-02-21	—
CVE-2026-31900US	critical9.8	0.48% (41st)	Exploit	no fix	2026-03-11	—
CVE-2026-32952US	high7.5	1.03% (63rd)	—	no fix	2026-04-24	—
CVE-2026-27699US	critical9.8	0.94% (61st)	—	no fix	2026-02-25	—
CVE-2026-7246US	—	0.90% (59th)	—	no fix	2026-04-30	—
CVE-2026-4926US	—	0.80% (57th)	—	no fix	2026-03-26	—
CVE-2026-3520US	high7.5	0.74% (54th)	—	no fix	2026-03-04	—
CVE-2026-42561US	—	0.74% (54th)	—	no fix	2026-05-13	—
CVE-2026-2327US	high7.5	0.74% (54th)	—	no fix	2026-02-12	—
CVE-2026-23897US	—	0.70% (53rd)	—	no fix	2026-02-04	—
CVE-2026-32274US	high7.5	0.63% (50th)	—	no fix	2026-03-12	—
CVE-2026-23949US	—	0.63% (50th)	—	no fix	2026-01-20	—
CVE-2026-33816US	—	0.56% (46th)	—	no fix	2026-04-07	—
CVE-2026-25547US	—	0.55% (46th)	—	no fix	2026-02-04	—
CVE-2026-3627US	critical9.1	0.51% (43rd)	—	no fix	2026-08-28	—
CVE-2026-41636US	high7.5	0.45% (39th)	—	no fix	2026-04-28	—
CVE-2026-26019US	—	0.40% (34th)	—	no fix	2026-02-11	—
CVE-2026-8723US	—	0.40% (34th)	—	no fix	2026-05-17	—
CVE-2025-47907US	—	0.38% (32nd)	—	no fix	2025-08-07	—
CVE-2025-22874US	—	0.37% (31st)	—	no fix	2025-06-11	—
CVE-2026-4923US	—	0.36% (29th)	—	no fix	2026-03-26	—
CVE-2026-40347US	—	0.35% (29th)	—	no fix	2026-04-18	—
CVE-2026-31808US	—	0.34% (28th)	—	no fix	2026-03-10	—
CVE-2026-41324US	—	0.33% (26th)	—	no fix	2026-04-24	—
CVE-2026-25528US	—	0.32% (25th)	—	no fix	2026-02-09	—
CVE-2026-40190US	critical9.8	0.31% (24th)	—	no fix	2026-04-10	—
CVE-2026-32630US	—	0.31% (24th)	—	no fix	2026-03-16	—
CVE-2026-32887US	—	0.28% (20th)	—	no fix	2026-03-20	—
CVE-2026-41238US	—	0.27% (19th)	—	no fix	2026-04-23	—
CVE-2026-41481US	—	0.26% (18th)	—	no fix	2026-04-24	—
CVE-2026-35515US	medium6.1	0.23% (14th)	—	no fix	2026-04-07	—
CVE-2026-34073US	medium5.3	0.22% (13th)	—	no fix	2026-03-31	—
CVE-2026-40181US	medium6.1	0.22% (13th)	—	no fix	2026-06-02	—
CVE-2025-64649US	medium5.9	0.22% (12th)	—	no fix	2026-08-28	—
CVE-2026-41182US	—	0.21% (12th)	—	no fix	2026-04-23	—
CVE-2026-41305US	—	0.21% (10th)	—	no fix	2026-04-24	—
CVE-2025-68146US	medium6.5	0.20% (9th)	—	no fix	2025-12-16	—
CVE-2026-4539US	—	0.16% (5th)	—	no fix	2026-03-22	—
CVE-2026-41488US	—	0.16% (5th)	—	no fix	2026-04-24	—
CVE-2026-44405US	—OT elevated	0.11% (1st)	—	no fix	2026-05-06	—
CVE-2026-41425US	—	0.11% (1st)	—	no fix	2026-04-24	—
CVE-2026-39984US	—	0.10% (1st)	—	no fix	2026-04-15	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-1333Inefficient Regular Expression Complexity6 CVEs
CWE-400Uncontrolled Resource Consumption6 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
CWE-918Server-Side Request Forgery (SSRF)4 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')3 CVEs
CWE-295Improper Certificate Validation3 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)45 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan