CVE-2025-33015

IBM Concert 1.0.0 through 2.1.0 is vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface.

Score

CVSS 3.1 8.8 High

Status

Analyzed - psirt@us.ibm.com

Published

2026-01-20

Last modified

2026-02-26

Weaknesses

CWE-434

Affected products

• Concert (Ibm)

References

• https://www.ibm.com/support/pages/node/7257006