cbcvebase.
CVE-2025-36149
published 2025-11-21

CVE-2025-36149: IBM Concert Software 1.0.0 through 2.0.0 could allow a remote attacker to hijack the clicking action of the victim.

medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
IBM Concert Software 1.0.0 through 2.0.0 could allow a remote attacker to hijack the clicking action of the victim.

Affected

2 ranges
VendorProductVersion rangeFixed in
ibmconcert>= 1.0.0 < 2.1.02.1.0
ibmibm_concert_software1.0.0 – 2.0.0