CVE-2025-36243
Last modified
CVE-2025-36243 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. IBM Concert 1.0.0 through 2.1.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.. EPSS estimates a 0.14% chance of exploitation in the next 30 days.
Description
IBM Concert 1.0.0 through 2.1.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Concert | >= 1.0.0, < 2.2.0 |
References
- https://www.ibm.com/support/pages/node/7260162Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-36243?
How severe is CVE-2025-36243?
How do I fix CVE-2025-36243?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-3623The Uncanny Automator plugin for WordPress is vulnerable to …9.1
- CVE-2025-36230IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 is vulnerable to …5.4
- CVE-2025-36236IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (f…9.1
- CVE-2025-36238IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.0…6
- CVE-2025-36239IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulner…6.1
- CVE-2025-3624Missing Authorization vulnerability in Hitachi Ops Center An…4.3
- CVE-2025-36244IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to …5.5
- CVE-2025-36245IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server …8.8
- CVE-2025-36247IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Se…8.2
- CVE-2025-36248IBM Copy Services Manager 6.3.13 is vulnerable to cross-site…6.1
- CVE-2025-36249IBM Jazz for Service Management 1.1.3.0 through 1.1.3.25 doe…5.3
- CVE-2025-3625A security vulnerability was discovered in Moodle that can a…7.1
Are you affected by CVE-2025-36243?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST