Vulnerabilities > IBM > Concert Software > High

DATE CVE VULNERABILITY TITLE RISK
2025-01-07 CVE-2024-52367 Exposure of System Data to an Unauthorized Control Sphere vulnerability in IBM Concert Software
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could disclose sensitive system information to an unauthorized actor that could be used in further attacks against the system.
network
low complexity
ibm CWE-497
7.5
2024-11-19 CVE-2024-52359 Incorrect User Management vulnerability in IBM Concert Software
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to perform unauthorized actions that should be reserved to administrator used due to improper access controls.
network
low complexity
ibm CWE-286
8.8