IBM Security Key Lifecycle Manager 2.5.0.5

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.5:*:*:*:*:*:*:*

part: a version: 2.5.0.5 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Key Lifecycle Manager (88c6c55d-8156-50ed-99f8-95060ba40722)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1727 vulnerable 2026-06-08 05:09:22.950458 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 discloses sensitive information in error messages that could aid an attacker in further attacks against the system. IBM X-Force ID: 134869.
Published: 2018-01-04T17:00:00.000Z
Updated: 2024-09-16T17:53:08.486Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1673 vulnerable 2026-06-08 05:09:22.812778 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133640.
Published: 2018-01-04T17:00:00.000Z
Updated: 2024-09-16T17:28:34.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1671 vulnerable 2026-06-08 05:09:22.811653 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 133638.
Published: 2018-01-09T20:00:00.000Z
Updated: 2024-09-17T03:29:02.385Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1670 vulnerable 2026-06-08 05:09:22.810911 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 133637.
Published: 2018-01-09T20:00:00.000Z
Updated: 2024-09-17T04:09:56.756Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1669 vulnerable 2026-06-08 05:09:22.810278 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 133636.
Published: 2018-01-04T17:00:00.000Z
Updated: 2024-09-16T23:46:41.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1668 vulnerable 2026-06-08 05:09:22.809633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1666 vulnerable 2026-06-08 05:09:22.808769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1665 vulnerable 2026-06-08 05:09:22.805697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1664 vulnerable 2026-06-08 05:09:22.799414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6117 vulnerable 2026-06-08 05:07:58.945517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6116 vulnerable 2026-06-08 05:07:58.944929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6105 vulnerable 2026-06-08 05:07:58.874068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6104 vulnerable 2026-06-08 05:07:58.873505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6103 vulnerable 2026-06-08 05:07:58.872940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6102 vulnerable 2026-06-08 05:07:58.872142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6099 vulnerable 2026-06-08 05:07:58.844503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6098 vulnerable 2026-06-08 05:07:58.843697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6097 vulnerable 2026-06-08 05:07:58.842845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6096 vulnerable 2026-06-08 05:07:58.841987 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6095 vulnerable 2026-06-08 05:07:58.839877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6094 vulnerable 2026-06-08 05:07:58.834065 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6093 vulnerable 2026-06-08 05:07:58.833256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6092 vulnerable 2026-06-08 05:07:58.824889 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.