Skip to content

Known vulnerabilities in IBM Security Guardium Key Lifecycle Manager

Is your version affected?

CVE Summary Score Published
CVE-2024-49816 IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores potentially sensitive information in log… 4.9 Medium Dec 17, 2024
CVE-2024-49820 IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain… 3.7 Low Dec 17, 2024
CVE-2024-49819 IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain… 4.1 Medium Dec 17, 2024
CVE-2024-49818 IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain… 4.3 Medium Dec 17, 2024
CVE-2024-49817 IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configuration… 4.4 Medium Dec 17, 2024
CVE-2023-25921 IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer… 8.5 High Feb 29, 2024
CVE-2023-25926 IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to an XML External Entity… 5.5 Medium Feb 29, 2024
CVE-2023-25925 IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow a remote authenticated… 8.5 High Feb 28, 2024
CVE-2023-25922 IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer… 4.3 Medium Feb 28, 2024
CVE-2023-47707 IBM Security Guardium Key Lifecycle Manager 4.3 is vulnerable to cross-site scripting 5.4 Medium Dec 20, 2023
CVE-2023-47703 IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to obtain sensitive information when a… 5.3 Medium Dec 20, 2023
CVE-2023-47702 IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to traverse directories on the system 4.3 Medium Dec 20, 2023
CVE-2023-47706 IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to upload files of a dangerous file… 6.6 Medium Dec 20, 2023
CVE-2023-47705 IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to manipulate username data due to… 4.3 Medium Dec 20, 2023
CVE-2023-47704 IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source… 4.0 Medium Dec 20, 2023

Other IBM products