Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_key_lifecycle_manager:2.5.0.0:*:*:*:*:*:*:*

part: a version: 2.5.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Key Lifecycle Manager (88c6c55d-8156-50ed-99f8-95060ba40722)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1727 vulnerable 2026-06-08 05:09:22.950359 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 discloses sensitive information in error messages that could aid an attacker in further attacks against the system. IBM X-Force ID: 134869.
Published: 2018-01-04T17:00:00.000Z
Updated: 2024-09-16T17:53:08.486Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1673 vulnerable 2026-06-08 05:09:22.812694 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133640.
Published: 2018-01-04T17:00:00.000Z
Updated: 2024-09-16T17:28:34.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1669 vulnerable 2026-06-08 05:09:22.810189 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 133636.
Published: 2018-01-04T17:00:00.000Z
Updated: 2024-09-16T23:46:41.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1665 vulnerable 2026-06-08 05:09:22.805606 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 133559.
Published: 2018-01-04T17:00:00.000Z
Updated: 2024-09-17T02:06:28.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1664 vulnerable 2026-06-08 05:09:22.796888 Details available
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 133557.
Published: 2018-01-04T17:00:00.000Z
Updated: 2024-09-16T23:52:12.131Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6117 vulnerable 2026-06-08 05:07:58.945432 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6116 vulnerable 2026-06-08 05:07:58.944841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6105 vulnerable 2026-06-08 05:07:58.873978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6104 vulnerable 2026-06-08 05:07:58.873421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6103 vulnerable 2026-06-08 05:07:58.872856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6102 vulnerable 2026-06-08 05:07:58.872055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6099 vulnerable 2026-06-08 05:07:58.844419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6098 vulnerable 2026-06-08 05:07:58.843601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6097 vulnerable 2026-06-08 05:07:58.842755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6096 vulnerable 2026-06-08 05:07:58.841895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6095 vulnerable 2026-06-08 05:07:58.839778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6094 vulnerable 2026-06-08 05:07:58.833975 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6093 vulnerable 2026-06-08 05:07:58.833145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6092 vulnerable 2026-06-08 05:07:58.822379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.