IBM Tivoli Key Lifecycle Manager

productDE

cpe:/a:ibm:tivoli_key_lifecycle_manager:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

7critical26high20medium0low

updated 2026-10-28

vulnerabilities (101)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-30065US	critical9.8	43.6% (99th)	Exploit	no fix	2025-04-01	—
CVE-2025-30749US	—	1.27% (70th)	Exploit	no fix	2025-07-15	—
CVE-2025-36038US	critical9.8	13.3% (96th)	—	no fix	2025-06-25	—
CVE-2025-30761US	—	5.23% (92nd)	—	no fix	2025-07-15	—
CVE-2023-23477US	critical9.8	1.95% (80th)	—	no fix	2023-02-03	—
CVE-2022-22389US	medium6.5	1.58% (75th)	—	no fix	2022-06-24	—
CVE-2023-47701US	high7.5	1.10% (66th)	—	no fix	2023-12-04	—
CVE-2023-45178US	high7.5	1.09% (65th)	—	no fix	2023-12-03	—
CVE-2023-46167US	high7.5	1.09% (65th)	—	no fix	2023-12-04	—
CVE-2023-38003US	high7.2	1.09% (65th)	—	no fix	2023-12-04	—
CVE-2023-40692US	high7.5	1.07% (65th)	—	no fix	2023-12-04	—
CVE-2023-40687US	high7.5	1.05% (64th)	—	no fix	2023-12-04	—
CVE-2023-38727US	high7.5	1.05% (64th)	—	no fix	2023-12-04	—
CVE-2023-29258US	high7.5	1.05% (64th)	—	no fix	2023-12-04	—
CVE-2024-20926US	—	1.03% (64th)	—	no fix	2024-01-16	—
CVE-2022-22390US	high7.5	0.98% (62nd)	—	no fix	2022-06-24	—
CVE-2026-14512US	—	0.97% (62nd)	—	no fix	2026-07-28	—
CVE-2024-30171US	—	0.90% (60th)	—	no fix	2024-05-14	—
CVE-2024-20921US	—OT elevated	0.86% (58th)	—	no fix	2024-02-17	—
CVE-2024-20919US	—	0.80% (56th)	—	no fix	2024-02-17	—
CVE-2024-20932US	—	0.78% (56th)	—	no fix	2024-01-16	—
CVE-2024-34447US	—	0.77% (55th)	—	no fix	2024-05-03	—
CVE-2024-30172US	—	0.75% (55th)	—	no fix	2024-05-14	—
CVE-2025-50106US	—	0.75% (55th)	—	no fix	2025-07-15	—
CVE-2024-45663US	high7.5	0.73% (54th)	—	no fix	2024-11-21	—
CVE-2026-14974US	critical9.8	0.68% (52nd)	—	no fix	2026-07-28	—
CVE-2025-30752US	—	0.67% (52nd)	—	no fix	2025-07-15	—
CVE-2024-22354US	high7.0	0.65% (51st)	—	no fix	2024-04-17	—
CVE-2025-50059US	—	0.61% (49th)	—	no fix	2025-07-15	—
CVE-2026-14976US	critical9.8OT elevated	0.61% (49th)	—	no fix	2026-07-28	—
CVE-2024-20923US	—	0.60% (49th)	—	no fix	2024-02-17	—
CVE-2024-31881US	medium6.5	0.60% (49th)	—	no fix	2024-06-12	—
CVE-2023-29267US	medium6.5	0.57% (47th)	—	no fix	2024-06-12	—
CVE-2024-28762US	medium6.5	0.57% (47th)	—	no fix	2024-06-12	—
CVE-2024-35152US	medium6.5	0.57% (47th)	—	no fix	2024-08-14	—
CVE-2024-35136US	medium6.5	0.55% (46th)	—	no fix	2024-08-14	—
CVE-2024-31882US	medium6.5	0.55% (46th)	—	no fix	2024-08-14	—
CVE-2024-37529US	medium6.5	0.55% (46th)	—	no fix	2024-08-14	—
CVE-2026-14529US	critical9.8OT elevated	0.53% (44th)	—	no fix	2026-07-29	—
CVE-2026-14446US	—OT elevated	0.53% (44th)	—	no fix	2026-07-28	—
CVE-2024-20955US	—	0.52% (44th)	—	no fix	2024-01-16	—
CVE-2026-9330US	—	0.52% (44th)	—	no fix	2026-06-01	—
CVE-2026-9311US	—	0.51% (43rd)	—	no fix	2026-06-01	—
CVE-2026-15280US	—	0.50% (43rd)	—	no fix	2026-07-28	—
CVE-2025-36097US	—	0.49% (42nd)	—	no fix	2025-07-16	—
CVE-2025-30754US	—	0.47% (41st)	—	no fix	2025-07-15	—
CVE-2026-16184US	critical9.8OT elevated	0.47% (41st)	—	no fix	2026-07-28	—
CVE-2026-14981US	—	0.46% (40th)	—	no fix	2026-07-28	—
CVE-2026-9319US	—	0.46% (40th)	—	no fix	2026-06-01	—
CVE-2026-14528US	high7.5	0.45% (39th)	—	no fix	2026-07-28	—

showing 50 of 101

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation20 CVEs
CWE-770Allocation of Resources Without Limits or Throttling12 CVEs
CWE-502Deserialization of Untrusted Data9 CVEs
CWE-789Memory Allocation with Excessive Size Value8 CVEs
CWE-400Uncontrolled Resource Consumption7 CVEs
CWE-284Improper Access Control6 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs
CWE-269Improper Privilege Management3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)101 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan