CVEvulnerability
CVE-2026-6327
4.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-09-23
- Last modified
- 2026-09-28
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-117
Description
IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.
Affected configurations
• ibm concert (>= 1.0.0 <= 3.0.0)
Related
Weakness · CWE (1)
- CWE-117 Improper Output Neutralization for Logs weakness
References
- https://www.ibm.com/support/pages/node/7288830 Patch, Vendor Advisory