CVE-2025-1761
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
IBM Concert Software versions 1.0.0 through 1.1.0 may allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
Risk Assessment
Leakage of sensitive data such as passwords or keys could lead to confidentiality breach.
Recommendation
Update IBM Concert Software to the latest patched version. Monitor for unusual activity.
Other vulnerabilities in IBM Concert Software
See all- CVE-2025-36083Medium
IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to improper clearing of heap memory before release.
- CVE-2025-36081Medium
IBM Concert Software 1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of log input.
Original NVD description (English source)
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS