KL
Product
Key Lifecycle Manager
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 7Low 1
Watch
Add Key Lifecycle Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6103 | 8.8 | Feb 2 | IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted… Affected: 2.5; 1.0; 2.0; 2.0.1; 2.6 |
| CVE-2016-6105 | 8.2 | Feb 1 | IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 do not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas Affected: 2.5; 1.0; 2.0; 2.0.1; 2.6 |
| CVE-2016-6104 | 7.2 | Feb 7 | IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions, which could allow the… Affected: 2.5; 1.0; 2.0; 2.0.1; 2.6 |
Showing 3
