# Vulnerabilities published in 2014


- [CVE-2014-4822](https://insights.sbomify.com/CVE-2014-4822/): Information disclosure in ibm:websphere mq (low 1.9)
- [CVE-2014-4821](https://insights.sbomify.com/CVE-2014-4821/): Information disclosure in ibm:websphere portal (medium 5.0)
- [CVE-2014-4820](https://insights.sbomify.com/CVE-2014-4820/): Cross-site scripting in ibm:integration bus manufacturing pack (medium 4.3)
- [CVE-2014-4819](https://insights.sbomify.com/CVE-2014-4819/): Information disclosure in ibm:integration bus (medium 4.0)
- [CVE-2014-4818](https://insights.sbomify.com/CVE-2014-4818/): Information disclosure in ibm:tivoli storage manager (low 2.1)
- [CVE-2014-4817](https://insights.sbomify.com/CVE-2014-4817/): Security feature bypass in ibm:tivoli storage manager (low 2.1)
- [CVE-2014-4816](https://insights.sbomify.com/CVE-2014-4816/): Cross-site request forgery in ibm:websphere application server (medium 6.0)
- [CVE-2014-4815](https://insights.sbomify.com/CVE-2014-4815/): Auth bypass in ibm: ibm rational lifecycle integration adapter for windchill (medium 4.3)
- [CVE-2014-4814](https://insights.sbomify.com/CVE-2014-4814/): Denial of service in ibm:websphere portal (low 3.5)
- [CVE-2014-4813](https://insights.sbomify.com/CVE-2014-4813/): Race condition in ibm:tivoli storage manager (medium 6.9)
- [CVE-2014-4812](https://insights.sbomify.com/CVE-2014-4812/): Misconfiguration in ibm:security appscan source (low 1.8)
- [CVE-2014-4811](https://insights.sbomify.com/CVE-2014-4811/): Auth bypass in ibm:san volume controller software (high 7.5)
- [CVE-2014-4810](https://insights.sbomify.com/CVE-2014-4810/): Auth bypass in ibm:cognos mobile (medium 4.3)
- [CVE-2014-4809](https://insights.sbomify.com/CVE-2014-4809/): Denial of service in ibm:security access manager for web 7.0 firmware (high 7.1)
- [CVE-2014-4808](https://insights.sbomify.com/CVE-2014-4808/): Other in ibm:websphere portal (medium 6.5)
- [CVE-2014-4807](https://insights.sbomify.com/CVE-2014-4807/): Denial of service in ibm:sterling selling and fulfillment foundation (medium 4.0)
- [CVE-2014-4806](https://insights.sbomify.com/CVE-2014-4806/): Information disclosure in ibm:security appscan (medium 5.5)
- [CVE-2014-4805](https://insights.sbomify.com/CVE-2014-4805/): Information disclosure in ibm:db2 (low 2.1)
- [CVE-2014-4804](https://insights.sbomify.com/CVE-2014-4804/): Information disclosure in ibm:curam social program management (medium 4.3)
- [CVE-2014-4803](https://insights.sbomify.com/CVE-2014-4803/): Other in ibm:curam social program management (low 3.5)
- [CVE-2014-4802](https://insights.sbomify.com/CVE-2014-4802/): Missing authorization in ibm:business process manager (medium 4.0)
- [CVE-2014-4801](https://insights.sbomify.com/CVE-2014-4801/): Cross-site scripting in ibm:rational quality manager (low 3.5)
- [CVE-2014-4793](https://insights.sbomify.com/CVE-2014-4793/): Security feature bypass in ibm:websphere mq (medium 6.5)
- [CVE-2014-4792](https://insights.sbomify.com/CVE-2014-4792/): Denial of service in ibm:websphere portal (medium 4.0)
- [CVE-2014-4790](https://insights.sbomify.com/CVE-2014-4790/): Security feature bypass in ibm:emptoris sourcing portfolio (medium 4.9)
- [CVE-2014-4789](https://insights.sbomify.com/CVE-2014-4789/): Auth bypass in ibm:initiate master data service (medium 6.8)
- [CVE-2014-4788](https://insights.sbomify.com/CVE-2014-4788/): Information disclosure in ibm:initiate master data service (medium 5.0)
- [CVE-2014-4787](https://insights.sbomify.com/CVE-2014-4787/): Cross-site scripting in ibm:initiate master data service (low 3.5)
- [CVE-2014-4786](https://insights.sbomify.com/CVE-2014-4786/): Security feature bypass in ibm:initiate master data service (medium 4.9)
- [CVE-2014-4785](https://insights.sbomify.com/CVE-2014-4785/): Cross-site request forgery in ibm:initiate master data service (medium 6.0)
- [CVE-2014-4784](https://insights.sbomify.com/CVE-2014-4784/): Security feature bypass in ibm:initiate master data service (medium 4.3)
- [CVE-2014-4783](https://insights.sbomify.com/CVE-2014-4783/): Cross-site request forgery in ibm:initiate master data service (medium 6.8)
- [CVE-2014-4782](https://insights.sbomify.com/CVE-2014-4782/): Information disclosure in ibm:infosphere biginsights (medium 6.5)
- [CVE-2014-4781](https://insights.sbomify.com/CVE-2014-4781/): Information disclosure in ibm:infosphere biginsights (medium 5.0)
- [CVE-2014-4778](https://insights.sbomify.com/CVE-2014-4778/): Other in ibm:endpoint manager family (medium 4.3)
- [CVE-2014-4776](https://insights.sbomify.com/CVE-2014-4776/): Information disclosure in ibm:license metric tool (low 2.1)
- [CVE-2014-4775](https://insights.sbomify.com/CVE-2014-4775/): Information disclosure in ibm:infosphere master data management (medium 5.0)
- [CVE-2014-4774](https://insights.sbomify.com/CVE-2014-4774/): Cross-site request forgery in ibm:endpoint manager family (medium 6.8)
- [CVE-2014-4771](https://insights.sbomify.com/CVE-2014-4771/): Denial of service in ibm:websphere mq (low 3.5)
- [CVE-2014-4770](https://insights.sbomify.com/CVE-2014-4770/): Cross-site scripting in ibm:websphere application server (low 3.5)
- [CVE-2014-4769](https://insights.sbomify.com/CVE-2014-4769/): XML external entity in ibm:websphere commerce (medium 4.0)
- [CVE-2014-4768](https://insights.sbomify.com/CVE-2014-4768/): Denial of service in ibm:uefi (low 2.1)
- [CVE-2014-4767](https://insights.sbomify.com/CVE-2014-4767/): Code injection in ibm:websphere application server (medium 6.5)
- [CVE-2014-4766](https://insights.sbomify.com/CVE-2014-4766/): Information disclosure in ibm:classic meeting server (medium 5.0)
- [CVE-2014-4765](https://insights.sbomify.com/CVE-2014-4765/): Information disclosure in ibm:change and configuration management database (medium 5.0)
- [CVE-2014-4764](https://insights.sbomify.com/CVE-2014-4764/): Denial of service in ibm:websphere application server (high 7.1)
- [CVE-2014-4763](https://insights.sbomify.com/CVE-2014-4763/): Cross-site scripting in ibm:filenet content foundation (low 3.5)
- [CVE-2014-4762](https://insights.sbomify.com/CVE-2014-4762/): Cross-site scripting in ibm:websphere portal (low 3.5)
- [CVE-2014-4761](https://insights.sbomify.com/CVE-2014-4761/): Information disclosure in ibm:websphere portal (medium 4.0)
- [CVE-2014-4760](https://insights.sbomify.com/CVE-2014-4760/): Open redirect in ibm:websphere portal (medium 5.8)
- [CVE-2014-4759](https://insights.sbomify.com/CVE-2014-4759/): Information disclosure in ibm:business process manager (medium 4.0)
- [CVE-2014-4758](https://insights.sbomify.com/CVE-2014-4758/): Server-side request forgery in ibm:business process manager (medium 4.0)
- [CVE-2014-4757](https://insights.sbomify.com/CVE-2014-4757/): Missing authorization in ibm:content collector (low 2.1)
- [CVE-2014-4756](https://insights.sbomify.com/CVE-2014-4756/): Auth bypass in ibm:rational license key server (low 3.5)
- [CVE-2014-4752](https://insights.sbomify.com/CVE-2014-4752/): Hardcoded credentials in ibm:bladecenter 10g vfsm (critical 10.0)
- [CVE-2014-4751](https://insights.sbomify.com/CVE-2014-4751/): Cross-site scripting in ibm:security access manager for mobile (medium 4.3)
- [CVE-2014-4750](https://insights.sbomify.com/CVE-2014-4750/): Information disclosure in ibm:powervc (low 2.9)
- [CVE-2014-4749](https://insights.sbomify.com/CVE-2014-4749/): Security feature bypass in ibm:powervc (medium 4.3)
- [CVE-2014-4748](https://insights.sbomify.com/CVE-2014-4748/): Cross-site scripting in ibm:sametime (medium 4.3)
- [CVE-2014-4747](https://insights.sbomify.com/CVE-2014-4747/): Information disclosure in ibm:sametime (low 2.1)
- [CVE-2014-4746](https://insights.sbomify.com/CVE-2014-4746/): Information disclosure in ibm:websphere portal (medium 5.0)
- [CVE-2014-4744](https://insights.sbomify.com/CVE-2014-4744/): Cross-site scripting in enhancesoft:osticket (medium 4.3)
- [CVE-2014-4743](https://insights.sbomify.com/CVE-2014-4743/): Cross-site scripting in kajona:kajona (medium 4.3)
- [CVE-2014-4742](https://insights.sbomify.com/CVE-2014-4742/): Cross-site scripting in kajona:kajona (medium 4.3)
- [CVE-2014-4741](https://insights.sbomify.com/CVE-2014-4741/): SQL injection in artifectx:xclassified (high 7.5)
- [CVE-2014-4738](https://insights.sbomify.com/CVE-2014-4738/): Cross-site scripting in fortinet:fortiweb (medium 4.3)
- [CVE-2014-4737](https://insights.sbomify.com/CVE-2014-4737/): Cross-site scripting in textpattern:textpattern (medium 4.3)
- [CVE-2014-4736](https://insights.sbomify.com/CVE-2014-4736/): SQL injection in blogengine:e2 (high 7.5)
- [CVE-2014-4735](https://insights.sbomify.com/CVE-2014-4735/): Cross-site scripting in mywebsql:mywebsql (medium 4.3)
- [CVE-2014-4734](https://insights.sbomify.com/CVE-2014-4734/): Cross-site scripting in e107:e107 (medium 4.3)
- [CVE-2014-4728](https://insights.sbomify.com/CVE-2014-4728/): Denial of service in tp-link:tl-wdr4300 (medium 5.0)
- [CVE-2014-4727](https://insights.sbomify.com/CVE-2014-4727/): Cross-site scripting in tp-link:tl-wdr4300 (medium 4.3)
- [CVE-2014-4726](https://insights.sbomify.com/CVE-2014-4726/): Other in mailpoet:mailpoet newsletters (high 7.5)
- [CVE-2014-4725](https://insights.sbomify.com/CVE-2014-4725/): Auth bypass in mailpoet:mailpoet newsletters (high 7.5)
- [CVE-2014-4724](https://insights.sbomify.com/CVE-2014-4724/): Cross-site scripting in custom banners project:custom banners (medium 4.3)
- [CVE-2014-4723](https://insights.sbomify.com/CVE-2014-4723/): Cross-site scripting in easy banners plugin project:easy banners (medium 4.3)
- [CVE-2014-4722](https://insights.sbomify.com/CVE-2014-4722/): Cross-site scripting in ocsinventory-ng:ocsinventory ng (medium 4.3)
- [CVE-2014-4721](https://insights.sbomify.com/CVE-2014-4721/): Information disclosure in debian:debian linux (low 2.6)
- [CVE-2014-4720](https://insights.sbomify.com/CVE-2014-4720/): Denial of service in email\:\ (medium 5.0)
- [CVE-2014-4719](https://insights.sbomify.com/CVE-2014-4719/): Cross-site scripting in usvn:user-friendly svn (medium 4.3)
- [CVE-2014-4718](https://insights.sbomify.com/CVE-2014-4718/): Cross-site request forgery in lunarcms:lunar cms (medium 6.8)
- [CVE-2014-4717](https://insights.sbomify.com/CVE-2014-4717/): Cross-site request forgery in sharethis:simple share buttons adder (medium 6.8)
- [CVE-2014-4716](https://insights.sbomify.com/CVE-2014-4716/): Cross-site request forgery in thomson:twg87ouir (medium 6.8)
- [CVE-2014-4715](https://insights.sbomify.com/CVE-2014-4715/): Integer overflow in yann collet:lz4 (medium 5.0)
- [CVE-2014-4710](https://insights.sbomify.com/CVE-2014-4710/): Cross-site scripting in aas9:zerocms (medium 4.3)
- [CVE-2014-4707](https://insights.sbomify.com/CVE-2014-4707/): Security feature bypass in S7700,S9300,S9700 S7700 V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300,S9300 V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300,S9700 V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, (high 8.8)
- [CVE-2014-4706](https://insights.sbomify.com/CVE-2014-4706/): Memory corruption in Campus S3700HI, S5700, S6700 S3300HI, S5300, S6300, S9300, S7700,LSW S9700,Campus S5700, S6700,Campus S7700, S9300E, S2350, S2750,S9300,S9300E, Campus S3700HI with software V200R001C00SPC300,Campus S5700 with software V200R002C00SPC100,Campus S7700 with software V200R003C00SPC300,V200R003C00SPC500,LSW S9700 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500,S2350 with software V200R003C00SPC300,S2750 with software V200R003C00SPC300,S5300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300,S5700 with software V200R001C00SPC300,V200R003C00SPC300,S6300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300,S6700 S3300HI with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300,S7700 with software V200R001C00SPC300,S9300 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500,S9300E with software V200R003C00SPC300,V200R003C00SPC500, (high 7.5)
- [CVE-2014-4705](https://insights.sbomify.com/CVE-2014-4705/): Memory corruption in huawei:ar1200 firmware (high 7.5)
- [CVE-2014-4703](https://insights.sbomify.com/CVE-2014-4703/): Path traversal in nagios:nagios (low 2.1)
- [CVE-2014-4702](https://insights.sbomify.com/CVE-2014-4702/): Information disclosure in nagios:nagios (low 2.1)
- [CVE-2014-4701](https://insights.sbomify.com/CVE-2014-4701/): Information disclosure in nagios:nagios (low 2.1)
- [CVE-2014-4700](https://insights.sbomify.com/CVE-2014-4700/): Privilege escalation in citrix:xendesktop (medium 4.9)
- [CVE-2014-4699](https://insights.sbomify.com/CVE-2014-4699/): Race condition in canonical:ubuntu linux (medium 6.9)
- [CVE-2014-4698](https://insights.sbomify.com/CVE-2014-4698/): Use after free in php:php (medium 4.6)
- [CVE-2014-4696](https://insights.sbomify.com/CVE-2014-4696/): Open redirect in netgate:pfsense (medium 5.8)
- [CVE-2014-4695](https://insights.sbomify.com/CVE-2014-4695/): Open redirect in netgate:pfsense (medium 5.8)
- [CVE-2014-4694](https://insights.sbomify.com/CVE-2014-4694/): Cross-site scripting in netgate:pfsense (medium 4.3)
- [CVE-2014-4693](https://insights.sbomify.com/CVE-2014-4693/): Cross-site scripting in netgate:pfsense (medium 4.3)
- [CVE-2014-4692](https://insights.sbomify.com/CVE-2014-4692/): Information disclosure in netgate:pfsense (medium 4.3)
- [CVE-2014-4691](https://insights.sbomify.com/CVE-2014-4691/): Auth bypass in netgate:pfsense (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/43/