CVE-2025-36253CWE-759

Multiple Vulnerabilities in IBM Concert Software.

Medium · published February 2, 2026

CVSS v3.1
5.9
EPSS
0%
Percentile
12.9
In the wild
Unconfirmed
What it is

IBM Concert 1.0.0 through 2.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00229 · 12.9th percentile
Weakness
CWE-759 · Use of a One-Way Hash without a Salt
Published
2026-02-02T21:52Z
EPSS history
Timeline
  • 02 FEB 21:52Z
    Multiple Vulnerabilities in IBM Concert Software.
    cvelistv5