CVE-2026-4413: IBM Concert Software Cross-Site Scripting
Published Oct 14, 2026
·Updated
IBM Concert
Affected Software
1 affected component
IBM Concert Software<=1.0-3.0.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Concert Softwareto a version that resolves this vulnerability.Fixed in 3.0.1.1
Event History
Oct 14, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Oct 19, 2026
CVE Published
via MITRE·05:17 PM
Data Sourced
via MITRE·05:17 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated attacker can exploit it by embedding arbitrary JavaScript code in the IBM Concert Web UI. Exploitation requires a user to interact with the malicious content.
2
Which versions are affected?
IBM Concert versions 1.0 through 3.0.0 are identified as vulnerable.
3
What is the likely impact if exploitation succeeds?
Injected JavaScript can alter intended Web UI functionality and may disclose credentials from a trusted user session. The provided vector indicates low confidentiality and integrity impact, with no availability impact.