Vulnerabilities > IBM > Security KEY Lifecycle Manager > 2.7.0.4

DATE CVE VULNERABILITY TITLE RISK
2019-10-04 CVE-2019-4564 Cross-site Scripting vulnerability in IBM Security KEY Lifecycle Manager
IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
6.1
6.1
2019-10-04 CVE-2019-4514 Information Exposure vulnerability in IBM Security KEY Lifecycle Manager
IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 discloses sensitive information to unauthorized users.
network
low complexity
ibm CWE-200
5.3
5.3
2018-10-08 CVE-2018-1750 Incorrect Permission Assignment for Critical Resource vulnerability in IBM Security KEY Lifecycle Manager
IBM Security Key Lifecycle Manager 3.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
network
low complexity
ibm CWE-732
8.1
8.1