Vulnerabilities > IBM > Security KEY Lifecycle Manager > Low

DATE CVE VULNERABILITY TITLE RISK
2021-11-12 CVE-2021-38973 Improper Input Validation vulnerability in IBM products
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
network
low complexity
ibm CWE-20
2.7
2.7
2020-12-17 CVE-2020-4846 Information Exposure Through an Error Message vulnerability in IBM Security KEY Lifecycle Manager
IBM Security Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
network
low complexity
ibm CWE-209
2.7
2.7
2018-01-04 CVE-2017-1669 Information Exposure vulnerability in IBM Security KEY Lifecycle Manager
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 stores sensitive information in URL parameters.
network
high complexity
ibm CWE-200
3.7
3.7
2017-03-27 CVE-2016-6102 Information Exposure vulnerability in IBM Security KEY Lifecycle Manager
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters.
network
high complexity
ibm CWE-200
3.7
3.7