IBM Security Key Lifecycle Manager 2.5.0.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.1:*:*:*:*:*:*:*

part: a version: 2.5.0.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Key Lifecycle Manager (88c6c55d-8156-50ed-99f8-95060ba40722)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1727 vulnerable 2026-06-08 05:09:22.950384 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 discloses sensitive information in error messages that could aid an attacker in further attacks against the system. IBM X-Force ID: 134869.
Published: 2018-01-04T17:00:00.000Z
Updated: 2024-09-16T17:53:08.486Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1673 vulnerable 2026-06-08 05:09:22.812712 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133640.
Published: 2018-01-04T17:00:00.000Z
Updated: 2024-09-16T17:28:34.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1671 vulnerable 2026-06-08 05:09:22.811587 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 133638.
Published: 2018-01-09T20:00:00.000Z
Updated: 2024-09-17T03:29:02.385Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1670 vulnerable 2026-06-08 05:09:22.810841 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 133637.
Published: 2018-01-09T20:00:00.000Z
Updated: 2024-09-17T04:09:56.756Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1669 vulnerable 2026-06-08 05:09:22.810210 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 133636.
Published: 2018-01-04T17:00:00.000Z
Updated: 2024-09-16T23:46:41.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1668 vulnerable 2026-06-08 05:09:22.809562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1666 vulnerable 2026-06-08 05:09:22.808697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1665 vulnerable 2026-06-08 05:09:22.805625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1664 vulnerable 2026-06-08 05:09:22.797423 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6117 vulnerable 2026-06-08 05:07:58.945452 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6116 vulnerable 2026-06-08 05:07:58.944859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6105 vulnerable 2026-06-08 05:07:58.873999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6104 vulnerable 2026-06-08 05:07:58.873439 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6103 vulnerable 2026-06-08 05:07:58.872875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6102 vulnerable 2026-06-08 05:07:58.872076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6099 vulnerable 2026-06-08 05:07:58.844438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6098 vulnerable 2026-06-08 05:07:58.843625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6097 vulnerable 2026-06-08 05:07:58.842777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6096 vulnerable 2026-06-08 05:07:58.841918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6095 vulnerable 2026-06-08 05:07:58.839805 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6094 vulnerable 2026-06-08 05:07:58.833996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6093 vulnerable 2026-06-08 05:07:58.833180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6092 vulnerable 2026-06-08 05:07:58.822888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.