Skip to content

Known vulnerabilities in IBM Corporation Key Lifecycle Manager

Is your version affected?

CVE Summary Score Published
CVE-2016-6102 IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters Not rated Mar 27, 2017
CVE-2016-6104 IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the… Not rated Feb 7, 2017
CVE-2016-6096 IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting Not rated Feb 7, 2017
CVE-2016-6094 IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 generates an error message that includes sensitive information… Not rated Feb 7, 2017
CVE-2016-6092 IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by… Not rated Feb 7, 2017
CVE-2016-6097 IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which can be read by… Not rated Feb 7, 2017
CVE-2016-6116 IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 could allow a remote attacker to obtain sensitive information, caused by… Not rated Feb 2, 2017
CVE-2016-6103 IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 is vulnerable to cross-site request forgery which could allow an attacker… Not rated Feb 2, 2017
CVE-2016-6095 IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 uses an inadequate account lockout setting that could allow a remote… Not rated Feb 2, 2017
CVE-2016-6099 IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 discloses sensitive information to unauthorized users Not rated Feb 2, 2017
CVE-2016-6117 IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 can be deployed with active debugging code that can disclose sensitive… Not rated Feb 1, 2017
CVE-2016-6105 IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 do not perform an authentication check for a critical resource or… Not rated Feb 1, 2017

Other IBM Corporation products