CVE-2026-4413 — Vulnerability intelligence

ibm — concert

Published: 2026-10-19T18:17:07.753

CVSS

6.1

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Sources

• CVE-2026-4413
• Vendor Advisory