CVE-2025-36149
Medium · 5.4CVSS
5.4
EPSS
0.2%
Published
Nov 21, 2025
CISA due date
—
The record
IBM Concert Software 1.0.0 through 2.0.0 could allow a remote attacker to hijack the clicking action of the victim.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|