Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_guardium_key_lifecycle_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Guardium Key Lifecycle Manager (0d5dbff8-cce1-51d7-9e41-92ffacce0b79)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-47707 vulnerable 2026-06-08 06:14:25.439318 IBM Security Guardium Key Lifecycle Manager cross-site scripting
MEDIUM (5.4)
IBM Security Guardium Key Lifecycle Manager 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 271522.
Published: 2023-12-20T01:48:09.428Z
Updated: 2024-08-02T21:16:43.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47706 vulnerable 2026-06-08 06:14:25.438737 IBM Security Guardium Key Lifecycle Manager file upload
MEDIUM (6.6)
IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to upload files of a dangerous file type. IBM X-Force ID: 271341.
Published: 2023-12-20T00:59:32.091Z
Updated: 2024-08-02T21:16:43.755Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47705 vulnerable 2026-06-08 06:14:25.438283 IBM Security Guardium Key Lifecycle Manager improper input validation
MEDIUM (4.3)
IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to manipulate username data due to improper input validation. IBM X-Force ID: 271228.
Published: 2023-12-20T00:56:27.076Z
Updated: 2024-09-11T20:18:35.663Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47704 vulnerable 2026-06-08 06:14:25.437367 IBM Security Guardium Key Lifecycle Manager information disclosure
MEDIUM (4)
IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source code repository. IBM X-Force ID: 271220.
Published: 2023-12-20T00:50:42.513Z
Updated: 2024-11-21T19:02:57.053Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47703 vulnerable 2026-06-08 06:14:25.436851 IBM Security Guardium Key Lifecycle Manager information disclosure
MEDIUM (5.3)
IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 271197.
Published: 2023-12-20T01:45:23.930Z
Updated: 2024-08-29T17:45:38.125Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47702 vulnerable 2026-06-08 06:14:25.434501 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25926 vulnerable 2026-06-08 05:56:10.773422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25925 vulnerable 2026-06-08 05:56:10.773006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25922 vulnerable 2026-06-08 05:56:10.771339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25921 vulnerable 2026-06-08 05:56:10.770797 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38985 vulnerable 2026-06-08 05:33:48.706378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38984 vulnerable 2026-06-08 05:33:48.705977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38980 vulnerable 2026-06-08 05:33:48.702800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38973 vulnerable 2026-06-08 05:33:48.692709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38972 vulnerable 2026-06-08 05:33:48.691297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.