CVEvulnerability

CVE-2026-3303

3.7 LOW Published 2026-10-19 Modified 2026-10-20 Official page ↗
Status
Awaiting Analysis
Published
2026-10-19
Last modified
2026-10-20
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-942

Description

IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.

Related

Weakness · CWE (1)

  • CWE-942 Permissive Cross-domain Security Policy with Untrusted Domains weakness

References