CVE-2026-3627

CriticalCVSS 9.1

Published: 28/08/2026(UTC)Translated: 29/08/2026(UTC)NVD NIST

Summary

IBM Concert versions 1.0.0 through 2.3.1 are vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, potentially allowing viewing, adding, modifying, or deleting information in the back-end database.

Risk Assessment

The risk involves potential unauthorized access to database information, which could compromise confidentiality, integrity, and availability of data.

Recommendation

It is recommended to immediately update IBM Concert to the latest available version that includes a fix for this vulnerability.

Original NVD description (English source)

IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.