IBM Concert 1.0.0 through 2.0.0 Software is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7249356 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
31 Oct 2025, 18:55
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ibm:concert:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* |
|
| First Time |
Linux linux Kernel
Linux Ibm concert Ibm |
|
| References | () https://www.ibm.com/support/pages/node/7249356 - Vendor Advisory |
28 Oct 2025, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-28 15:16
Updated : 2025-10-31 18:55
NVD link : CVE-2025-36085
Mitre link : CVE-2025-36085
CVE.ORG link : CVE-2025-36085
JSON object : View
Products Affected
ibm
- concert
linux
- linux_kernel
CWE
CWE-918
Server-Side Request Forgery (SSRF)