IBM Security Key Lifecycle Manager 2.5.0.3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.3:*:*:*:*:*:*:*

part: a version: 2.5.0.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Key Lifecycle Manager (88c6c55d-8156-50ed-99f8-95060ba40722)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1727 vulnerable 2026-06-08 05:09:22.950422 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 discloses sensitive information in error messages that could aid an attacker in further attacks against the system. IBM X-Force ID: 134869.
Published: 2018-01-04T17:00:00.000Z
Updated: 2024-09-16T17:53:08.486Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1673 vulnerable 2026-06-08 05:09:22.812746 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133640.
Published: 2018-01-04T17:00:00.000Z
Updated: 2024-09-16T17:28:34.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1671 vulnerable 2026-06-08 05:09:22.811621 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 133638.
Published: 2018-01-09T20:00:00.000Z
Updated: 2024-09-17T03:29:02.385Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1670 vulnerable 2026-06-08 05:09:22.810878 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 133637.
Published: 2018-01-09T20:00:00.000Z
Updated: 2024-09-17T04:09:56.756Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1669 vulnerable 2026-06-08 05:09:22.810246 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 133636.
Published: 2018-01-04T17:00:00.000Z
Updated: 2024-09-16T23:46:41.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1668 vulnerable 2026-06-08 05:09:22.809600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1666 vulnerable 2026-06-08 05:09:22.808736 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1665 vulnerable 2026-06-08 05:09:22.805661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1664 vulnerable 2026-06-08 05:09:22.798398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6117 vulnerable 2026-06-08 05:07:58.945485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6116 vulnerable 2026-06-08 05:07:58.944894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6105 vulnerable 2026-06-08 05:07:58.874034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6104 vulnerable 2026-06-08 05:07:58.873472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6103 vulnerable 2026-06-08 05:07:58.872909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6102 vulnerable 2026-06-08 05:07:58.872108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6099 vulnerable 2026-06-08 05:07:58.844471 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6098 vulnerable 2026-06-08 05:07:58.843663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6097 vulnerable 2026-06-08 05:07:58.842812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6096 vulnerable 2026-06-08 05:07:58.841954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6095 vulnerable 2026-06-08 05:07:58.839844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6094 vulnerable 2026-06-08 05:07:58.834031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6093 vulnerable 2026-06-08 05:07:58.833221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6092 vulnerable 2026-06-08 05:07:58.823847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.