Tivoli Key Lifecycle Manager Security Vulnerabilities and Issues — Tivoli Key Lifecycle Manager CVE List

Lucene search

IbmTivoli Key Lifecycle Manager

2 matches found

CVE•added 2017/02/07 4:59 p.m.•44 views

CVE-2016-6092

IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by a local user.

6.2CVSS6.2AI score0.0005EPSS

CVE•added 2017/02/07 4:59 p.m.•37 views

CVE-2016-6096

IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

6.1CVSS6AI score0.00317EPSS