Approved changes feed: RSS · Atom

cpe:2.3:a:ibm_corporation:key_lifecycle_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm Corporation (d12a6641-f3f1-52ca-aee3-0e264bbe9c89)
ProductKey Lifecycle Manager (46d33016-b32a-59c9-a884-9d99c5c49af7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-6117 vulnerable 2026-06-08 05:07:58.945381 Details available
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 can be deployed with active debugging code that can disclose sensitive information.
Published: 2017-02-01T21:00:00.000Z
Updated: 2024-08-06T01:22:20.241Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6116 vulnerable 2026-06-08 05:07:58.944777 Details available
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Published: 2017-02-02T22:00:00.000Z
Updated: 2024-08-06T01:22:20.472Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6105 vulnerable 2026-06-08 05:07:58.873924 Details available
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 do not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas.
Published: 2017-02-01T21:00:00.000Z
Updated: 2024-08-06T01:22:19.995Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6104 vulnerable 2026-06-08 05:07:58.873371 Details available
IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions, which could allow the attacker to execute arbitrary code on the vulnerable system.
Published: 2017-02-07T16:00:00.000Z
Updated: 2024-08-06T01:22:20.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6103 vulnerable 2026-06-08 05:07:58.872798 Details available
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Published: 2017-02-02T22:00:00.000Z
Updated: 2024-08-06T01:22:19.684Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6102 vulnerable 2026-06-08 05:07:58.871982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6099 vulnerable 2026-06-08 05:07:58.844367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6097 vulnerable 2026-06-08 05:07:58.842724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6096 vulnerable 2026-06-08 05:07:58.841863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6095 vulnerable 2026-06-08 05:07:58.834768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6094 vulnerable 2026-06-08 05:07:58.833944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6092 vulnerable 2026-06-08 05:07:58.821789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.