| CVE-2023-25684 |
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to SQL injection
|
6.5
Medium
|
Mar 21, 2023 |
| CVE-2023-25686 |
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 stores user credentials in plain clear…
|
6.2
Medium
|
Mar 21, 2023 |
| CVE-2023-25923 |
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an attacker to upload files that…
|
2.7
Low
|
Mar 21, 2023 |
| CVE-2023-25688 |
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1could allow a remote attacker to traverse…
|
4.3
Medium
|
Mar 21, 2023 |
| CVE-2023-25687 |
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to…
|
4.3
Medium
|
Mar 21, 2023 |
| CVE-2023-25924 |
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform…
|
5.4
Medium
|
Mar 21, 2023 |
| CVE-2023-25689 |
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1 , and 4.1.1 could allow a remote attacker to traverse…
|
2.7
Low
|
Mar 21, 2023 |
| CVE-2021-38980 |
IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a…
|
2.7
Low
|
Nov 23, 2021 |
| CVE-2021-38984 |
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that…
|
3.7
Low
|
Nov 15, 2021 |
| CVE-2021-38983 |
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that…
|
4.4
Medium
|
Nov 15, 2021 |
| CVE-2021-38982 |
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting
|
5.4
Medium
|
Nov 15, 2021 |
| CVE-2021-38981 |
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive…
|
5.3
Medium
|
Nov 15, 2021 |
| CVE-2021-38979 |
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses a one-way cryptographic hash against an input that should…
|
4.4
Medium
|
Nov 15, 2021 |
| CVE-2021-38978 |
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information,…
|
5.9
Medium
|
Nov 15, 2021 |
| CVE-2021-38977 |
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 does not set the secure attribute on authorization tokens or…
|
3.1
Low
|
Nov 15, 2021 |
| CVE-2021-38976 |
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 stores user credentials in plain clear text which can be…
|
6.2
Medium
|
Nov 15, 2021 |
| CVE-2021-38975 |
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to to obtain sensitive…
|
4.3
Medium
|
Nov 15, 2021 |
| CVE-2021-38974 |
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to cause a denial of service…
|
5.4
Medium
|
Nov 15, 2021 |
| CVE-2021-38985 |
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or…
|
4.3
Medium
|
Nov 12, 2021 |
| CVE-2021-38973 |
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or…
|
2.4
Low
|
Nov 12, 2021 |
| CVE-2021-38972 |
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or…
|
4.3
Medium
|
Nov 12, 2021 |
| CVE-2020-4846 |
IBM Security Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a…
|
2.7
Low
|
Dec 17, 2020 |
| CVE-2020-4845 |
IBM Security Key Lifecycle Manager 3.0.1 and 4.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Dec 17, 2020 |
| CVE-2020-4568 |
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, and 4.0 stores user credentials in plain in clear text which can be read by…
|
6.3
Medium
|
Nov 10, 2020 |
| CVE-2020-4574 |
IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it…
|
7.4
High
|
Jul 29, 2020 |