CVE-2025-33101
Multiple Vulnerabilities in IBM Concert Software.
- State
- Published
- Severity
- 5.9 Medium
- Published
- Feb 17, 2026
- Updated
- Mar 6, 2026
- Reserved
- Apr 15, 2025
Description
IBM Concert 1.0.0 through 2.1.0 could allow an attacker to obtain sensitive information using man in the middle techniques due to improper clearing of heap memory.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.9 Medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N | ibm |
Weaknesses
- CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection')
Affected Products
| Product | Versions |
|---|---|
ConcertIBM |
|
References
- https://www.ibm.com/support/pages/node/7260162vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.