Known vulnerabilities in IBM Security Guardium Key Lifecycle Manager (GKLM) - page 10

Vendor: IBM Corporation
Software: IBM Security Guardium Key Lifecycle Manager (GKLM)
Software CPE: cpe:2.3:a:ibm_corporation:sgklm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 205
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Guardium Key Lifecycle Manager (GKLM) IBM Security Guardium Key Lifecycle Manager (GKLM) is affected by 205 known vulnerabilities: 2 critical, 34 high, 112 medium, 57 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82583 - Observable discrepancy
CVE-2023-33850		 CWE-203 Medium
No
No
 - 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU82580 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-40372		 CWE-89 Medium
No
No
 - 31.10.2023 SB2023103131
SB2023110304
SB2023111305
and 10 more
#VU82578 - Resource exhaustion
CVE-2023-30987		 CWE-400 Medium
No
No
 - 31.10.2023 SB2023103131
SB2023110304
SB2023111305
and 9 more
#VU82577 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-38740		 CWE-89 Medium
No
No
 - 31.10.2023 SB2023103131
SB2023110304
SB2023111305
and 10 more
#VU81724 - Resource exhaustion
CVE-2023-38728		 CWE-400 Low
No
No
 - 10.10.2023 SB2023101016
SB2023103131
SB2023110304
and 9 more
#VU81723 - Resource exhaustion
CVE-2023-38720		 CWE-400 Low
No
No
 - 10.10.2023 SB2023101015
SB2023103131
SB2023110304
and 9 more
#VU81722 - Resource exhaustion
CVE-2023-30991		 CWE-400 Medium
No
No
 - 10.10.2023 SB2023101014
SB2023103131
SB2023110304
and 9 more
#VU81713 - Resource exhaustion
CVE-2023-40373		 CWE-400 Low
No
No
 - 09.10.2023 SB2023100932
SB2023103131
SB2023110304
and 9 more
#VU81712 - Resource exhaustion
CVE-2023-38719		 CWE-400 Medium
No
No
 - 09.10.2023 SB2023100931
SB2023103131
SB2023110304
and 10 more
#VU79803 - Memory corruption
CVE-2023-39976		 CWE-119 High
No
No
 - 21.08.2023 SB20230821103
SB20230821228
SB2023082854
and 22 more
#VU75260 - Improper input validation
CVE-2023-21930		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU73904 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-26283		 CWE-79 Medium
No
No
 - 21.03.2023 SB2023032154
SB2023042750
SB2023062138
#VU71715 - Deserialization of Untrusted Data
CVE-2023-23477		 CWE-502 Critical
No
No
 - 31.01.2023 SB2023013137
SB2023020111
SB2023020114
and 9 more
#VU66748 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-5259		 CWE-94 Medium
No
No
 4.1.1 FP6 24.08.2022 SB20200310151
SB2022082433
SB2023031611
and 8 more
#VU62399 - Improper input validation
CVE-2022-21426		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more
#VU60834 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23450		 CWE-94 High
No
No
 4.1.1 FP6 23.02.2022 SB2022022311
SB2022022312
SB2022031011
and 41 more
#VU29228 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4051		 CWE-79 Low
No
No
 4.1.1 FP6 24.06.2020 SB2020062408
SB2022082433
SB2022120724
and 7 more
#VU25348 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10785		 CWE-79 Low
No
No
 4.1.1 FP6 14.02.2020 SB2020021405
SB2022082433
SB2023040530
and 7 more
#VU36773 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2018-15494		 CWE-74 High
No
No
 4.1.1 FP6 18.08.2018 SB2018081804
SB2022070505
SB2022082433
and 11 more
#VU37568 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-6561		 CWE-79 Low
No
No
 4.2 02.02.2018 SB2018020212
SB2023090406
SB2024010446
and 3 more


Showing elements 181 - 200 out of 205