NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
81840 | CVE-2016-6103 | IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. | 2 | 6.8 | Medium | 2017-02-08 | 2017-02-07 | View | |
83969 | CVE-2016-6102 | IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM Reference #: 2000359. | 2 | 4.3 | Medium | 2017-07-18 | 2017-07-11 | View | |
81839 | CVE-2016-6099 | IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. | 2 | 5 | Medium | 2017-02-15 | 2017-02-08 | View | |
86824 | CVE-2016-6098 | IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. | 2 | 5.5 | Medium | 2017-06-18 | 2017-06-13 | View | |
81838 | CVE-2016-6097 | IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which can be read by another user on the system. | 2 | 2.1 | Low | 2017-02-15 | 2017-02-09 | View |
Page 1468 of 17672, showing 5 records out of 88360 total, starting on record 7336, ending on 7340