CVE-2025-64648CWE-319

Multiple Vulnerabilities in IBM Concert Software

Medium · published March 25, 2026

CVSS v3.1
5.9
EPSS
0%
Percentile
8.1
In the wild
Unconfirmed
What it is

IBM Concert 1.0.0 through 2.2.0 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00189 · 8.1th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-03-25T20:38Z
EPSS history
Timeline
  • 25 MAR 20:38Z
    Multiple Vulnerabilities in IBM Concert Software
    cvelistv5