Known vulnerabilities in IBM Security Guardium Key Lifecycle Manager (GKLM) - page 5

Vendor: IBM Corporation
Software: IBM Security Guardium Key Lifecycle Manager (GKLM)
Software CPE: cpe:2.3:a:ibm_corporation:sgklm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 205
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Guardium Key Lifecycle Manager (GKLM) IBM Security Guardium Key Lifecycle Manager (GKLM) is affected by 205 known vulnerabilities: 2 critical, 34 high, 112 medium, 57 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96059 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50315		 CWE-200 Low
No
No
 - 15.08.2024 SB2024081567
SB2024082831
SB2024082846
and 9 more
#VU95625 - Improper input validation
CVE-2024-35154		 CWE-20 Low
No
No
 - 09.08.2024 SB2024080941
SB2024081324
SB2024081439
and 11 more
#VU94733 - Resource exhaustion
CVE-2024-28762		 CWE-400 Low
No
No
 - 25.07.2024 SB2024072514
SB2024072902
SB2024073008
and 10 more
#VU94728 - Resource exhaustion
CVE-2023-29267		 CWE-400 Medium
No
No
 - 25.07.2024 SB2024072511
SB2024072902
SB2024073008
and 10 more
#VU94727 - Allocation of Resources Without Limits or Throttling
CVE-2024-31881		 CWE-770 Low
No
No
 - 25.07.2024 SB2024072510
SB2024072902
SB2024073008
and 10 more
#VU94694 - Resource exhaustion
CVE-2024-31880		 CWE-400 Low
No
No
 - 24.07.2024 SB2024072411
SB2024072902
SB2024073008
and 10 more
#VU94637 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-37532		 CWE-451 Medium
No
No
 - 22.07.2024 SB2024072221
SB2024072222
SB2024072306
and 14 more
#VU93396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-35153		 CWE-79 Medium
No
No
 - 26.06.2024 SB2024062690
SB2024062708
SB2024062717
and 12 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 - 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU87744 - Out-of-bounds write
CVE-2024-29133		 CWE-787 High
No
No
 - 22.03.2024 SB2024032169
SB2024032283
SB20240417122
and 40 more
#VU87706 - Out-of-bounds write
CVE-2024-29131		 CWE-787 High
No
No
 - 21.03.2024 SB2024032169
SB2024032283
SB20240417122
and 36 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757		 CWE-611 Medium
No
No
 - 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 74 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 - 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 - 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 102 more
#VU84368 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-38727		 CWE-89 Medium
No
No
 - 13.12.2023 SB2023121302
SB2024032815
SB2024040818
and 10 more
#VU84101 - Resource exhaustion
CVE-2023-43020		 CWE-400 Low
No
No
 - 12.12.2023 SB2023121237
SB2024032815
SB2024040818
and 10 more
#VU84043 - Double Free
CVE-2002-0059		 CWE-415 Medium
No
No
 - 11.12.2023 SB2023121128
SB2024032815
SB2024040818
and 10 more
#VU82299 - Heap-based Buffer Overflow
CVE-2023-45853		 CWE-122 Medium
No
No
 - 23.10.2023 SB2023102325
SB2023102633
SB2023102634
and 40 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Available
No
 - 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 - 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more


Showing elements 81 - 100 out of 205