[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fw6XyCKH4FAcV0XW8R6T5A1Ho_FIplZHclJ0F9d4ciJ8":3,"g5a-risk:CVE-2023-25921":137},{"success":4,"data":5,"meta":134},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":28,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":59,"references":60,"referencesCount":59,"weaknesses":76,"weaknessesCount":85,"isActivelyExploited":86,"cisaInfo":28,"otxData":28,"relatedBlogPosts":87,"seoMetadata":88,"configurations":113,"relatedVendorCves":132,"notableEvents":133},"CVE-2023-25921","What is CVE-2023-25921?","IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 247620.","IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be au...","2024-02-29T01:38:24.113","2024-12-13T20:53:05.783",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":28,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"psirt@us.ibm.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":27,"BaseSeverity":23,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","NETWORK","HIGH","LOW","NONE","CHANGED",8.5,null,1.8,6,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":36,"ImpactScore":37},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":24,"PrivilegesRequired":24,"UserInteraction":25,"Scope":35,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"UNCHANGED",2.8,5.9,0.01103,[38,38,38,38,38,38,38],"High",[42,47,51,55],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"ibm","security_guardium_key_lifecycle_manager","*","cpe:2.3:a:ibm:security_guardium_key_lifecycle_manager:*:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":49,"criteria":50,"vulnerable":4},"aix","-","cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":49,"criteria":54,"vulnerable":4},"linux","linux_kernel","cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":49,"criteria":58,"vulnerable":4},"microsoft","windows","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",4,[61,66,72,74],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F247620","Ibmcloud",[65],"VDB Entry",{"url":67,"source":68,"tags":69},"https:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fpages\u002Fnode\u002F6964516","Ibm",[70,71],"Patch","Vendor Advisory",{"url":62,"source":63,"tags":73},[65],{"url":67,"source":68,"tags":75},[70,71],[77],{"id":78,"name":79,"description":80,"extendedDescription":81,"status":82,"abstraction":83,"structure":84},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",1,false,[],{"title":89,"metaDescription":90,"keywords":91,"canonicalUrl":92,"structuredData":93},"What is CVE-2023-25921? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-25921, a high severity cyber security vulnerability from 2024. IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0...","CVE-2023-25921, CVE-2023-25921 vulnerability, CVE-2023-25921 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, ibm security, linux security, microsoft security, security_guardium_key_lifecycle_manager vulnerability, aix vulnerability, linux_kernel vulnerability, windows vulnerability","\u002Fwhat-is\u002Fcve-2023-25921",{"@context":94,"@type":95,"headline":89,"description":90,"datePublished":10,"dateModified":11,"author":96,"publisher":100,"about":104,"mainEntityOfPage":108,"articleSection":111,"keywords":112},"https:\u002F\u002Fschema.org","TechArticle",{"@type":97,"name":98,"url":99},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":97,"name":98,"url":99,"logo":101},{"@type":102,"url":103},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":105,"name":6,"description":106,"additionalType":107},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":109,"@id":110},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-25921","Cybersecurity","CVE-2023-25921, CVE-2023-25921 vulnerability, CVE-2023-25921 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[114],{"Operator":115,"Negate":28,"Nodes":116},"AND",[117,124],{"Operator":118,"Negate":28,"CPEMatch":119},"OR",[120],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":121,"VersionStartExcluding":28,"VersionStartIncluding":122,"VersionEndExcluding":123,"VersionEndIncluding":28},"AD8F66D0-AC3B-493B-9774-5374B1B22E10","3.0.0","4.1.1.7",{"Operator":118,"Negate":28,"CPEMatch":125},[126,128,130],{"Vulnerable":28,"Criteria":50,"MatchCriteriaID":127,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E492C463-D76E-49B7-A4D4-3B499E422D89",{"Vulnerable":28,"Criteria":54,"MatchCriteriaID":129,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",{"Vulnerable":28,"Criteria":58,"MatchCriteriaID":131,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[],{"lastModified":11,"cacheTime":135,"version":136},1793216172974,"2.0",{"score":138,"band":139,"action":140,"scoredAt":141},49,"Medium","Plan remediation","2026-07-01T10:32:01.547517+00:00"]