Security Key Lifecycle Manager
70 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Security Key Lifecycle Manager, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
Security Key Lifecycle Manager CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 70 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical4
- High16
- Medium44
- Low6
Latest CVEs
The 15 most recently published vulnerabilities affecting Security Key Lifecycle Manager.
- CVE-2023-25684IBM Security Key Lifecycle Manager SQL injection6.5
- CVE-2023-25686IBM Security Key Lifecycle Manager information disclosure6.2
- CVE-2023-25923IBM Security Key Lifecycle Manager denial of service2.7
- CVE-2023-25688IBM Security Key Lifecycle Manager information disclosure4.3
- CVE-2023-25687IBM Security Key Lifecycle Manager information disclosure4.3
- CVE-2023-25924IBM Security Key Lifecycle Manager improper authorization5.4
- CVE-2023-25689IBM Security Key Lifecycle Manager information disclosure2.7
- CVE-2021-38980IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error...5.3
- CVE-2021-38984IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 21...7.5
- CVE-2021-38983IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 21...7.5
- CVE-2021-38982IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the i...5.4
- CVE-2021-38981IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This info...5.3
- CVE-2021-38979IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the software does not also use a ...7.5
- CVE-2021-38978IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An ...5.9
- CVE-2021-38977IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a h...4.3
Product grouping is registry-driven, with AI assist and human review. How it works