Known vulnerabilities in IBM Security Guardium Key Lifecycle Manager (GKLM) - page 4

Vendor: IBM Corporation
Software: IBM Security Guardium Key Lifecycle Manager (GKLM)
Software CPE: cpe:2.3:a:ibm_corporation:sgklm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 205
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Guardium Key Lifecycle Manager (GKLM) IBM Security Guardium Key Lifecycle Manager (GKLM) is affected by 205 known vulnerabilities: 2 critical, 34 high, 112 medium, 57 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111988 - Deserialization of Untrusted Data
CVE-2025-36038		 CWE-502 Critical
No
No
 - 27.06.2025 SB2025062708
SB2025063083
SB2025070944
and 14 more
#VU109860 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-33104		 CWE-79 Low
No
No
 - 27.05.2025 SB2025052752
SB2025052753
SB2025052908
and 6 more
#VU107856 - Server-Side Request Forgery (SSRF)
CVE-2025-27907		 CWE-918 Medium
No
No
 - 23.04.2025 SB2025042309
SB2025042318
SB2025042345
and 11 more
#VU104172 - Uncontrolled Memory Allocation
CVE-2024-45663		 CWE-789 Medium
No
No
 - 25.02.2025 SB2025022520
SB2025022521
SB2025031921
and 6 more
#VU104124 - Allocation of Resources Without Limits or Throttling
CVE-2024-41762		 CWE-770 Medium
No
No
 - 21.02.2025 SB2025022118
SB2025022521
SB2025031921
and 6 more
#VU104123 - Allocation of Resources Without Limits or Throttling
CVE-2024-41761		 CWE-770 Low
No
No
 - 21.02.2025 SB2025022117
SB2025022521
SB2025031921
and 6 more
#VU104121 - Information Exposure Through Log Files
CVE-2024-40679		 CWE-532 Low
No
No
 - 21.02.2025 SB2025022116
SB2025022521
SB2025031921
and 7 more
#VU104120 - Uncontrolled Memory Allocation
CVE-2024-37071		 CWE-789 Low
No
No
 - 21.02.2025 SB2025022115
SB2025022521
SB2025031921
and 6 more
#VU100912 - Improper Authentication
CVE-2024-10963		 CWE-287 Medium
No
No
 5.0.0 FP1 25.11.2024 SB2024112540
SB2024112541
SB2024112542
and 56 more
#VU99280 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45071		 CWE-79 Low
No
No
 - 23.10.2024 SB2024102327
SB2024102343
SB2024102353
and 11 more
#VU98810 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-45072		 CWE-611 Medium
No
No
 - 18.10.2024 SB2024101807
SB2024101813
SB20241022399
and 11 more
#VU98436 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2024-31882		 CWE-74 Low
No
No
 - 14.10.2024 SB2024101426
SB2024101427
SB2024102434
and 6 more
#VU98434 - Resource exhaustion
CVE-2024-35136		 CWE-400 Low
No
No
 - 14.10.2024 SB2024101421
SB2024101427
SB2024102434
and 7 more
#VU98433 - Uncontrolled Memory Allocation
CVE-2024-35152		 CWE-789 Low
No
No
 - 14.10.2024 SB2024101403
SB2024101427
SB2024102434
and 7 more
#VU98432 - Uncontrolled Memory Allocation
CVE-2024-37529		 CWE-789 Low
No
No
 - 14.10.2024 SB2024101402
SB2024101427
SB2024102434
and 7 more
#VU98136 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45073		 CWE-79 Low
No
No
 - 08.10.2024 SB2024100833
SB2024100834
SB2024100942
and 12 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172		 CWE-835 Medium
No
No
 - 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89219 - Observable discrepancy
CVE-2024-30171		 CWE-203 Medium
No
No
 - 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 - 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364		 CWE-918 Medium
No
No
 - 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more


Showing elements 61 - 80 out of 205