CVE-2025-36081
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
IBM Concert Software 1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of log input.
Risk Assessment
Risk includes the ability to manipulate system logs, which may hinder security auditing and hide attacker actions.
Recommendation
Update to a patched version of IBM Concert Software and implement proper input validation.
Other vulnerabilities in IBM Concert Software
See all- CVE-2025-36083Medium
IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to improper clearing of heap memory before release.
- CVE-2025-1761Medium
IBM Concert Software versions 1.0.0 through 1.1.0 may allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
Original NVD description (English source)
IBM Concert Software 1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of log input.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS