SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2025-64649

MEDIUM · CVSS 5.9 EPSS 0.22%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-07

CyberRota Analysis

AI-Generated

IBM Concert versions 1.0.0 through 2.3.1 are vulnerable to man-in-the-middle attacks due to improper certificate validation, which could enable remote attackers to execute unauthorized actions. Organizations using these versions should prioritize patching to mitigate the risk of potential data breaches or unauthorized access. This vulnerability is particularly relevant for those managing sensitive information or relying on secure communications within their systems.

CVE
CVE-2025-64649
Severity
MEDIUM
CVSS
5.9
EPSS
0.22%

Original NVD Description

IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation.

Related CVEs

Other vulnerabilities affecting the same vendor(s)