IBM Security Guardium Key Lifecycle Manager vulnerabilities, page 2
29 vulnerabilities
Known vulnerabilities in IBM Security Guardium Key Lifecycle Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-47704ibmsecurity_guardium_key_lifecycle_manager
EPSS score0.61%
IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source code repository. IBM X-Force ID: 271220.CVE-2023-47706ibmsecurity_guardium_key_lifecycle_managerEPSS score0.84%
IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to upload files of a dangerous file type. IBM X-Force ID: 271341.CVE-2023-47703ibmsecurity_guardium_key_lifecycle_managerEPSS score0.76%
IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 271197.CVE-2023-47702ibmsecurity_guardium_key_lifecycle_managerEPSS score0.97%
IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view modify files on the system. IBM X-Force ID: 271196.CVE-2023-47705ibmsecurity_guardium_key_lifecycle_managerEPSS score0.52%
IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to manipulate username data due to improper input validation. IBM X-Force ID: 271228.CVE-2023-25922ibmsecurity_guardium_key_lifecycle_managerEPSS score0.56%
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 247621.CVE-2023-25926ibmsecurity_guardium_key_lifecycle_managerEPSS score1.38%
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 247599.CVE-2023-25921ibmsecurity_guardium_key_lifecycle_managerEPSS score1.10%
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 247620.CVE-2023-25925ibmsecurity_guardium_key_lifecycle_managerEPSS score1.35%
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 247632.