What is the CVSS score of CVE-2025-1719?

CVE-2025-1719 has a CVSS 3.1 base score of 5.9 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of Concert are affected by CVE-2025-1719?

CVE-2025-1719 presents moderate security risk rated CVSS 5.9. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-1719?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Concert CVE-2025-1719

MEDIUM

Improper Clearing of Heap Memory Before Release ('Heap Inspection') (CWE-244)

2026-01-20 psirt@us.ibm.com

IBM Concert

5.9

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.9 MEDIUM

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 20, 2026 - 15:16 nvd

MEDIUM 5.9

DescriptionCVE.org

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.

AnalysisAI

Concert versions up to 2.1.0 contains a vulnerability that allows attackers to a remote attacker to obtain sensitive information from allocated memory due to i (CVSS 5.9).

Technical ContextAI

affects Concert. IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in Concert

View all

CVE-2024-52360 CRITICAL Act Now

9.8 Nov 19

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 is vulnerable to SQL injection. Rated critical severity (CVSS 9.8)

CVE-2024-43177 CRITICAL Act Now

9.8 Oct 22

IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute. Rated

CVE-2025-33015 HIGH This Week

8.8 Jan 20

Concert versions up to 2.1.0 is affected by unrestricted upload of file with dangerous type (CVSS 8.8).

CVE-2024-52359 HIGH This Week

8.8 Nov 19

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to perform unauthorized actions

CVE-2025-33088 HIGH This Week

7.4 Feb 17

Concert versions up to 2.1.0 is affected by incorrect permission assignment for critical resource (CVSS 7.4).

CVE-2024-55909 MEDIUM This Month

6.5 May 02

IBM Concert Software 1.0.0 through 1.0.5 could allow an authenticated user to cause a denial of service due to the expan

CVE-2024-55910 MEDIUM This Month

6.5 May 02

IBM Concert Software 1.0.0 through 1.0.5 is vulnerable to server-side request forgery (SSRF). Rated medium severity (CVS

CVE-2024-51451 MEDIUM This Month

6.5 Feb 04

Concert versions up to 2.1.0 contains a vulnerability that allows attackers to conduct various attacks against the vulne

CVE-2025-33089 MEDIUM This Month

6.5 Feb 17

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information or perform unauthorized ac

CVE-2025-36018 MEDIUM This Month

6.5 Feb 17

IBM Concert 1.0.0 through 2.1.0 for Z hub component is vulnerable to cross-site request forgery which could allow an att

CVE-2024-37070 MEDIUM This Month

6.5 Nov 19

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to obtain sensitive information

CVE-2024-43181 MEDIUM This Month

6.3 Feb 04

IBM Concert 1.0.0 through 2.1.0 does not invalidate session after logout which could allow an authenticated user to impe

Same weakness CWE-244 – Improper Clearing of Heap Memory Before Release ('Heap Inspection')

View all

CVE-2025-26304 HIGH POC

8.2

CVE-2025-26305 HIGH POC

8.2

CVE-2026-20039 HIGH

8.6

CVE-2025-70873 HIGH POC

7.5

CVE-2022-20922 MEDIUM

6.5

CVE-2025-1722 MEDIUM

5.9

CVE-2025-33101 MEDIUM

5.9

CVE-2022-20943 MEDIUM

5.8

CVE-2025-1719 vulnerability details – vuln.today

Back

Concert CVE-2025-1719

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Concert

Same weakness CWE-244 – Improper Clearing of Heap Memory Before Release ('Heap Inspection')

Share

External POC / Exploit Code