CVE-2024-43173

3.7 lowEPSS 0.2%

Low (3.7) in ibm concert. EPSS 0.2% chance of exploitation in the next 30 days.

IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.

Severity

3.7 low

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWE: CWE-1275
Published: 2024-10-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19