Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_guardium_key_lifecycle_manager:3.0:*:*:*:*:*:*:*

part: a version: 3.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Guardium Key Lifecycle Manager (0d5dbff8-cce1-51d7-9e41-92ffacce0b79)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25925 vulnerable 2026-06-08 05:56:10.772880 IBM Security Guardium Key Lifecycle Manager command injection
HIGH (8.5)
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 247632.
Published: 2024-02-28T21:53:27.276Z
Updated: 2024-08-02T11:32:12.735Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25921 vulnerable 2026-06-08 05:56:10.767569 IBM Security Guardium Key Lifecycle Manager file upload
HIGH (8.5)
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 247620.
Published: 2024-02-29T00:36:01.872Z
Updated: 2024-08-26T19:14:39.214Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.