← Volver a CVEs
CVE-2025-33015
HIGH8.8
Descripcion
IBM Concert 1.0.0 through 2.1.0 is vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface.
Detalles CVE
Puntuacion CVSS v3.18.8
SeveridadHIGH
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioREQUIRED
Publicado1/20/2026
Ultima modificacion1/26/2026
Fuentenvd
Avistamientos honeypot0
Productos afectados
ibm:concert
Debilidades (CWE)
CWE-434
Referencias
https://www.ibm.com/support/pages/node/7257006(psirt@us.ibm.com)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.