Login Request a demo
KL
Product
Key Lifecycle Manager
by IBM Corporation · last CVE Mar 27, 2017
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 1High 3Medium 7Low 1
Severity
All severities12Critical1High3Medium7Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Key Lifecycle Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-6095
9.8
2%
Feb 2
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials
Affected: 2.5; 1.0; 2.0; 2.0.1; 2.6
CVE-2016-6103
8.8
1%
Feb 2
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted…
Affected: 2.5; 1.0; 2.0; 2.0.1; 2.6
CVE-2016-6105
8.2
2%
Feb 1
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 do not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas
Affected: 2.5; 1.0; 2.0; 2.0.1; 2.6
CVE-2016-6104
7.2
3%
Feb 7
IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions, which could allow the…
Affected: 2.5; 1.0; 2.0; 2.0.1; 2.6
CVE-2016-6092
6.2
0%
Feb 7
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by a local user
Affected: 2.5; 1.0; 2.0; 2.0.1; 2.6
CVE-2016-6096
6.1
1%
Feb 7
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting
Affected: 2.5; 1.0; 2.0; 2.0.1; 2.6
CVE-2016-6116
5.9
1%
Feb 2
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security
Affected: 2.5; 1.0; 2.0; 2.0.1; 2.6
CVE-2016-6099
5.3
1%
Feb 2
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 discloses sensitive information to unauthorized users
Affected: 2.5; 1.0; 2.0; 2.0.1; 2.6
CVE-2016-6117
5.3
2%
Feb 1
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 can be deployed with active debugging code that can disclose sensitive information
Affected: 2.5; 1.0; 2.0; 2.0.1; 2.6
CVE-2016-6094
4.3
1%
Feb 7
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 generates an error message that includes sensitive information about its environment, users, or associated data
Affected: 2.5; 1.0; 2.0; 2.0.1; 2.6
CVE-2016-6097
4.0
0%
Feb 7
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which can be read by another user on the system
Affected: 2.5; 1.0; 2.0; 2.0.1; 2.6
CVE-2016-6102
3.7
1%
Mar 27
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters
Affected: 2.5; 2.6
Showing 12