Description
IBM Concert Software 1.0.0 through 2.0.0 could allow a remote attacker to hijack the clicking action of the victim.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | IBM Concert Software | 1.0.0 – ≤ 2.0.0 | — |
Medium · 6.3
CVE-2025-36149
EUVD-2025-198503GHSA-x7wx-jvcp-69v8
IBM Concert Software clickjacking
Published Nov 21, 2025 · Updated Nov 21, 2025 · Assigned by ibm