SK
Product
Security Key Lifecycle Manager
70
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 19Medium 41Low 4
Watch
Add Security Key Lifecycle Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1669 | 3.7 | Jan 4 | IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 stores sensitive information in URL parameters Affected: 2.5.0.0; 2.5.0.1; 2.5.0.2; 2.5.0.3; 2.5.0.4; 2.5.0.5; +10 more |
| CVE-2016-6102 | 3.7 | Mar 27 | IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters Affected: 2.5.0; 2.5.0.0; 2.5.0.1; 2.5.0.2; 2.5.0.3; 2.5.0.4; +6 more |
| CVE-2021-38973 | 2.7 | Nov 12 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are… Affected: 3.0 through 3.0.0.4; 3.0.1 through 3.0.1.5; 4.0 through 4.0.0.3 |
| CVE-2020-4846 | 2.7 | Dec 17 | IBM Security Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 3.0.1 before 3.0.1.5; 4.0 before 4.0.0.2 |
Showing 4
