ibm security guardium key lifecycle manager

Name: ibm security guardium key lifecycle manager
Brand: ibm

productUS

cpe:2.3:a:ibm:security_guardium_key_lifecycle_manager:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical10high14medium1low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-25926US	high8.2	1.38% (72nd)	—	4.1.1.7	2024-02-29	3.0.0 → 4.1.1.7
CVE-2021-38981US	medium5.3	1.37% (72nd)	—	no fix	2021-11-15	3 versions
CVE-2023-25925US	high8.8	1.35% (71st)	—	4.1.1.7	2024-02-28	3.0.0 → 4.1.1.7
CVE-2021-38980US	medium5.3	1.23% (69th)	—	no fix	2021-11-23	2 versions
CVE-2023-25921US	high8.8	1.10% (66th)	—	4.1.1.7	2024-02-29	3.0.0 → 4.1.1.7
CVE-2021-38974US	medium6.5	1.00% (63rd)	—	no fix	2021-11-15	3 versions
CVE-2023-47702US	critical9.1	0.97% (62nd)	—	4.2.0.2	2023-12-20	4.2.0 → 4.2.0.2
CVE-2021-38975US	medium6.5	0.97% (62nd)	—	no fix	2021-11-15	3 versions
CVE-2021-38983US	high7.5	0.91% (60th)	—	no fix	2021-11-15	3 versions
CVE-2021-38978US	medium5.9OT elevated	0.89% (59th)	—	no fix	2021-11-15	3 versions
CVE-2023-47706US	high8.8	0.84% (58th)	—	4.2.0.2	2023-12-20	4.2.0 → 4.2.0.2
CVE-2023-47703US	medium5.3	0.76% (55th)	—	4.2.0.2	2023-12-20	4.2.0 → 4.2.0.2
CVE-2021-38979US	high7.5	0.71% (54th)	—	no fix	2021-11-15	3 versions
CVE-2021-38984US	high7.5	0.63% (50th)	—	no fix	2021-11-15	2 versions
CVE-2021-38985US	medium4.3	0.63% (50th)	—	no fix	2021-11-12	2 versions
CVE-2021-38972US	medium4.3	0.63% (50th)	—	no fix	2021-11-12	2 versions
CVE-2023-47704US	high7.5OT elevated	0.61% (49th)	—	4.2.0.2	2023-12-20	4.2.0 → 4.2.0.2
CVE-2021-38973US	low2.7	0.59% (48th)	—	no fix	2021-11-12	2 versions
CVE-2023-25922US	high8.8	0.56% (46th)	—	4.1.1.7	2024-02-28	3.0.0 → 4.1.1.7
CVE-2021-38982US	medium5.4	0.53% (45th)	—	no fix	2021-11-15	3 versions
CVE-2021-38977US	medium4.3OT elevated	0.53% (45th)	—	no fix	2021-11-15	3 versions
CVE-2023-47705US	medium4.3	0.52% (44th)	—	4.2.0.2	2023-12-20	4.2.0 → 4.2.0.2
CVE-2024-49818US	—	0.47% (41st)	—	no fix	2024-12-17	4 versions
CVE-2023-47707US	medium5.4	0.44% (38th)	—	no fix	2023-12-20	4.2.0 → 4.2.0.2
CVE-2024-49816US	medium4.4	0.35% (29th)	—	no fix	2024-12-17	4 versions
CVE-2024-49819US	high7.5OT elevated	0.26% (17th)	—	no fix	2024-12-17	4 versions
CVE-2024-49820US	—OT elevated	0.25% (17th)	—	no fix	2024-12-17	4 versions
CVE-2021-38976US	medium5.5	0.24% (15th)	—	no fix	2021-11-15	3 versions
CVE-2024-49817US	—	0.19% (8th)	—	no fix	2024-12-17	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation4 CVEs
CWE-209Generation of Error Message Containing Sensitive Information4 CVEs
CWE-319Cleartext Transmission of Sensitive Information3 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type3 CVEs
CWE-326Inadequate Encryption Strength2 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan