IBM Tivoli Key Lifecycle Manager vulnerabilities

6 vulnerabilities

Known vulnerabilities in IBM Tivoli Key Lifecycle Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2016-6093ibmsecurity_key_lifecycle_manager+1
EPSS score
1.75%
IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.6.1CVE-2016-6096ibm corporationkey lifecycle manager+2
EPSS score
0.87%
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.8.1CVE-2016-6098ibmsecurity_key_lifecycle_manager+1
EPSS score
1.03%
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.4.3CVE-2016-6094ibm corporationkey lifecycle manager+2
EPSS score
0.94%
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 generates an error message that includes sensitive information about its environment, users, or associated data.4CVE-2016-6097ibm corporationkey lifecycle manager+2
EPSS score
0.34%
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which can be read by another user on the system.6.2CVE-2016-6092ibm corporationkey lifecycle manager+2
EPSS score
0.32%
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by a local user.