CyberRota Analysis
AI-GeneratedIBM Concert versions 1.0.0 through 2.3.1 are susceptible to SQL injection vulnerabilities, enabling remote attackers to execute malicious SQL queries. This could lead to unauthorized access, manipulation, or deletion of sensitive data within the back-end database. Organizations using affected versions should prioritize immediate remediation to mitigate potential data breaches and integrity issues.
CVE
CVE-2026-3627
Severity
CRITICAL
CVSS
9.1
EPSS
0.51%
Original NVD Description
IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Related CVEs
Other vulnerabilities affecting the same vendor(s)