CVE-2025-33015 HIGH

CVE-2025-33015: Multiple Vulnerabilities in IBM Concert Software

Vendor Ibm

Product Concert

Weakness CWE-434 · Unrestricted file upload

Published January 20, 2026

Last update February 26, 2026

CVSS base score

8.8/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

IBM Concert 1.0.0 through 2.1.0 is vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface.

Key dates

January 20, 2026 CVE published

February 26, 2026 Record updated

External resources

Related vulnerabilities