VulnSocial

CVE-2025-36243Disclosure(ibm / concert)

LOWCVSS 4.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM Concert 1.0.0 through 2.1.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

ibm CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • concert

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-03-23)
  • 3 total mentions across 2 days

Affected systems

Vendors
ibm
Products
concert

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-02-18: 1Mentions · 2026-03-23: 2Technical Details · 2026-02-18: 1Technical Details · 2026-03-23: 202-1803-23
Signal classification1 categories
Disclosure
3100.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-02-181
Disclosure1
2026-03-232
Disclosure2
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2025-36243 IBM Concert 1.0.0 through 2.1.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the s… https://www.cve.org/CVERecord?id=CVE-2025-36243 ----- Traducción: CVE-2025-36243 IBM… http://infoflow.cloud`

    Post summary

    The text announces IBM Concert's SSRF vulnerability (CVE‑2025‑36243), noting that authenticated users could send unauthorized requests, but provides no PoC, exploit, patch, or evidence of active exploitation.

    0000049
    61 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2025-36243 IBM Concert 1.0.0 through 2.1.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the s… https://www.cve.org/CVERecord?id=CVE-2025-36243

    Post summary

    IBM Concert 1.0.0 to 2.1.0 suffers a server‑side request forgery vulnerability that could let authenticated attackers send unauthorized requests.

    00000206
    56.8K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2025-36243 Server-Side Request Forgery (SSRF) Vulnerability in IBM Concert 1... https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-36243 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4

    Post summary

    The post announces the discovery of a SSRF vulnerability (CVE-2025-36243) in IBM Concert 1 and provides a link to further details, but offers no PoC, exploit code, patch, or active exploitation information.

    0000048
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appibmconcert---

Explore more

Back to dashboardibm CVEsconcert vulnerabilities