TI-2023-25844 CVE-2023-47707 · GHSA-x9cr-h838-qp47
IBM Security Guardium Key Lifecycle Manager cross-site scripting
Priority LOW 25
IBM Security Guardium Key Lifecycle Manager 4.3 is vulnerable to cross-site scripting.
Vulnerabilities
6 records
Advisory: IBM Security Guardium Key Lifecycle Manager — ibm.com/support/pages/node/7091157 Clear all filters
TI-2023-25840 CVE-2023-47703 · GHSA-4h8q-hvrp-cmqh
IBM Security Guardium Key Lifecycle Manager information disclosure
Priority LOW 31
IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
TI-2023-25839 CVE-2023-47702 · GHSA-gcrp-3x2h-3w2h
IBM Security Guardium Key Lifecycle Manager directory traversal
Priority MEDIUM 41
IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to traverse directories on the system.
TI-2023-25843 CVE-2023-47706 · GHSA-qg4r-fj25-xf35
IBM Security Guardium Key Lifecycle Manager file upload
Priority MEDIUM 40
IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to upload files of a dangerous file type.
TI-2023-25842 CVE-2023-47705 · GHSA-vxjj-qm22-4cqm
IBM Security Guardium Key Lifecycle Manager improper input validation
Priority LOW 21
IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to manipulate username data due to improper input validation.
TI-2023-25841 CVE-2023-47704 · GHSA-rg4q-3xgq-2623
IBM Security Guardium Key Lifecycle Manager information disclosure
Priority LOW 34
IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source code repository.