CVE-2026-4413 — 脆弱性インテリジェンス

ibm — concert

公表日: 2026-10-19T18:17:07.753

CVSS

6.1

CISA KEV

未掲載（悪用がないことを意味しません）

情報源の原文（翻訳ではありません）

IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

情報源

• CVE-2026-4413
• Vendor Advisory