Skip to content
Sign in
5.4 Medium

CVE-2023-47707 IBM Security Guardium Key Lifecycle Manager 4.3 is vulnerable to cross-site scripting

Description

IBM Security Guardium Key Lifecycle Manager 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 271522.

Affected products and versions

Product Affected versions Fixed in
Security Guardium Key Lifecycle Manager 4.3 No fix stated

Other CVEs of Security Guardium Key Lifecycle Manager

The 15 CVEs of Security Guardium Key Lifecycle Manager →
CVE-2024-49816 IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores potentially sensitive information in log… 4.9 Medium CVE-2024-49820 IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain… 3.7 Low CVE-2024-49819 IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain… 4.1 Medium CVE-2024-49818 IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain… 4.3 Medium
Track this CVE