# Vulnerabilities published in 2014


- [CVE-2014-3083](https://insights.sbomify.com/CVE-2014-3083/): Information disclosure in ibm:websphere application server (medium 5.0)
- [CVE-2014-3081](https://insights.sbomify.com/CVE-2014-3081/): Path traversal in ibm:global console manager 16 firmware (medium 6.3)
- [CVE-2014-3080](https://insights.sbomify.com/CVE-2014-3080/): Cross-site scripting in ibm:global console manager 16 firmware (medium 4.3)
- [CVE-2014-3079](https://insights.sbomify.com/CVE-2014-3079/): Missing authorization in ibm:rational license key server (low 2.1)
- [CVE-2014-3077](https://insights.sbomify.com/CVE-2014-3077/): Information disclosure in ibm:storwize unified v7000 (low 2.1)
- [CVE-2014-3076](https://insights.sbomify.com/CVE-2014-3076/): Information disclosure in ibm:business process manager (medium 5.0)
- [CVE-2014-3075](https://insights.sbomify.com/CVE-2014-3075/): Cross-site scripting in ibm:business process manager (low 3.5)
- [CVE-2014-3074](https://insights.sbomify.com/CVE-2014-3074/): Privilege escalation in ibm:aix (high 7.2)
- [CVE-2014-3073](https://insights.sbomify.com/CVE-2014-3073/): Other in ibm:security access manager for mobile appliance (critical 10.0)
- [CVE-2014-3072](https://insights.sbomify.com/CVE-2014-3072/): Privilege escalation in ibm:security appscan source (high 7.2)
- [CVE-2014-3071](https://insights.sbomify.com/CVE-2014-3071/): Cross-site scripting in ibm:infosphere information server (medium 4.3)
- [CVE-2014-3070](https://insights.sbomify.com/CVE-2014-3070/): Security feature bypass in ibm:websphere application server (medium 5.0)
- [CVE-2014-3069](https://insights.sbomify.com/CVE-2014-3069/): Other in ibm:curam social program management (low 3.5)
- [CVE-2014-3068](https://insights.sbomify.com/CVE-2014-3068/): Weak cryptography in ibm:java (medium 6.4)
- [CVE-2014-3066](https://insights.sbomify.com/CVE-2014-3066/): XML external entity in ibm:tivoli endpoint manager (medium 5.0)
- [CVE-2014-3065](https://insights.sbomify.com/CVE-2014-3065/): Code injection in ibm:java (medium 6.9)
- [CVE-2014-3064](https://insights.sbomify.com/CVE-2014-3064/): Path traversal in ibm:infosphere master data management collaboration server (medium 6.3)
- [CVE-2014-3063](https://insights.sbomify.com/CVE-2014-3063/): Privilege escalation in ibm:infosphere master data management (high 7.5)
- [CVE-2014-3062](https://insights.sbomify.com/CVE-2014-3062/): Other in ibm:qradar security information and event manager (critical 9.3)
- [CVE-2014-3061](https://insights.sbomify.com/CVE-2014-3061/): Cross-site request forgery in ibm:emptoris spend analysis (medium 6.8)
- [CVE-2014-3060](https://insights.sbomify.com/CVE-2014-3060/): Auth bypass in ibm:websphere datapower xc10 appliance (critical 10.0)
- [CVE-2014-3059](https://insights.sbomify.com/CVE-2014-3059/): Auth bypass in ibm:websphere datapower xc10 appliance (critical 10.0)
- [CVE-2014-3058](https://insights.sbomify.com/CVE-2014-3058/): Cross-site request forgery in ibm:websphere datapower xc10 appliance firmware (medium 6.0)
- [CVE-2014-3057](https://insights.sbomify.com/CVE-2014-3057/): Cross-site scripting in ibm:websphere portal (medium 4.3)
- [CVE-2014-3056](https://insights.sbomify.com/CVE-2014-3056/): Information disclosure in ibm:websphere portal (medium 5.0)
- [CVE-2014-3055](https://insights.sbomify.com/CVE-2014-3055/): SQL injection in ibm:websphere portal (high 7.5)
- [CVE-2014-3054](https://insights.sbomify.com/CVE-2014-3054/): Open redirect in ibm:websphere portal (medium 5.8)
- [CVE-2014-3053](https://insights.sbomify.com/CVE-2014-3053/): Auth bypass in ibm:security access manager for mobile appliance (high 8.0)
- [CVE-2014-3052](https://insights.sbomify.com/CVE-2014-3052/): Weak cryptography in ibm:security access manager for web 8.0 firmware (low 3.3)
- [CVE-2014-3051](https://insights.sbomify.com/CVE-2014-3051/): Weak cryptography in ibm:tivoli composite application manager for transactions (medium 4.3)
- [CVE-2014-3050](https://insights.sbomify.com/CVE-2014-3050/): Information disclosure in ibm:rational team concert (low 3.5)
- [CVE-2014-3048](https://insights.sbomify.com/CVE-2014-3048/): Privilege escalation in ibm:system storage virtualization engine ts7700 (medium 6.0)
- [CVE-2014-3045](https://insights.sbomify.com/CVE-2014-3045/): Information disclosure in ibm:scale out network attached storage (low 2.1)
- [CVE-2014-3043](https://insights.sbomify.com/CVE-2014-3043/): Privilege escalation in ibm:storwize unified v7000 (medium 6.5)
- [CVE-2014-3042](https://insights.sbomify.com/CVE-2014-3042/): Denial of service in ibm:cics transaction server (medium 4.0)
- [CVE-2014-3041](https://insights.sbomify.com/CVE-2014-3041/): SQL injection in ibm:emptoris contract management (medium 6.5)
- [CVE-2014-3040](https://insights.sbomify.com/CVE-2014-3040/): Cross-site request forgery in ibm:emptoris contract management (medium 6.0)
- [CVE-2014-3038](https://insights.sbomify.com/CVE-2014-3038/): Privilege escalation in ibm:spss modeler (low 3.6)
- [CVE-2014-3037](https://insights.sbomify.com/CVE-2014-3037/): Cross-site request forgery in ibm:rational engineering lifecycle manager (medium 6.0)
- [CVE-2014-3036](https://insights.sbomify.com/CVE-2014-3036/): Auth bypass in ibm:api management (medium 4.3)
- [CVE-2014-3035](https://insights.sbomify.com/CVE-2014-3035/): Cross-site scripting in ibm:emptoris spend analysis (low 3.5)
- [CVE-2014-3034](https://insights.sbomify.com/CVE-2014-3034/): Cross-site scripting in ibm:emptoris contract management (low 3.5)
- [CVE-2014-3033](https://insights.sbomify.com/CVE-2014-3033/): Cross-site scripting in ibm:emptoris sourcing portfolio (low 3.5)
- [CVE-2014-3032](https://insights.sbomify.com/CVE-2014-3032/): Cross-site scripting in ibm:tivoli netcool\/omnibus (low 3.5)
- [CVE-2014-3031](https://insights.sbomify.com/CVE-2014-3031/): Cross-site scripting in ibm:tivoli business service manager (low 3.5)
- [CVE-2014-3026](https://insights.sbomify.com/CVE-2014-3026/): Other in ibm:maximo asset management (low 3.5)
- [CVE-2014-3025](https://insights.sbomify.com/CVE-2014-3025/): Cross-site scripting in ibm:maximo asset management (low 3.5)
- [CVE-2014-3024](https://insights.sbomify.com/CVE-2014-3024/): Cross-site request forgery in ibm:maximo asset management (medium 6.0)
- [CVE-2014-3022](https://insights.sbomify.com/CVE-2014-3022/): Information disclosure in ibm:websphere application server (medium 4.3)
- [CVE-2014-3021](https://insights.sbomify.com/CVE-2014-3021/): Information disclosure in ibm:websphere application server (medium 5.0)
- [CVE-2014-3020](https://insights.sbomify.com/CVE-2014-3020/): Misconfiguration in ibm:embedded websphere application server (medium 6.9)
- [CVE-2014-3019](https://insights.sbomify.com/CVE-2014-3019/): Auth bypass in ibm:sas connectivity module firmware (medium 5.0)
- [CVE-2014-3018](https://insights.sbomify.com/CVE-2014-3018/): Denial of service in ibm:sas connectivity module firmware (high 7.8)
- [CVE-2014-3015](https://insights.sbomify.com/CVE-2014-3015/): Cross-site request forgery in ibm:sametime proxy server and web client (medium 6.8)
- [CVE-2014-3014](https://insights.sbomify.com/CVE-2014-3014/): Cross-site scripting in ibm:sametime (low 3.5)
- [CVE-2014-3013](https://insights.sbomify.com/CVE-2014-3013/): Cross-site scripting in ibm:curam social program management (low 3.5)
- [CVE-2014-3012](https://insights.sbomify.com/CVE-2014-3012/): Other in ibm:curam social program management (low 3.5)
- [CVE-2014-3011](https://insights.sbomify.com/CVE-2014-3011/): Other in ibm:openpages grc platform (medium 5.0)
- [CVE-2014-3010](https://insights.sbomify.com/CVE-2014-3010/): Cross-site scripting in ibm:websphere service registry and repository (medium 4.3)
- [CVE-2014-3009](https://insights.sbomify.com/CVE-2014-3009/): Other in ibm:infosphere master data management (low 3.5)
- [CVE-2014-3008](https://insights.sbomify.com/CVE-2014-3008/): Command injection in unitrends:enterprise backup (critical 10.0)
- [CVE-2014-3007](https://insights.sbomify.com/CVE-2014-3007/): Pillow command injection (critical 10.0)
- [CVE-2014-3006](https://insights.sbomify.com/CVE-2014-3006/): Missing authorization in sitepark:information enterprise server (medium 6.8)
- [CVE-2014-3005](https://insights.sbomify.com/CVE-2014-3005/): XML external entity in fedoraproject:fedora (critical 9.8)
- [CVE-2014-3004](https://insights.sbomify.com/CVE-2014-3004/): Improper Restriction of XML External Entity Reference in Castor (medium 4.3)
- [CVE-2014-3001](https://insights.sbomify.com/CVE-2014-3001/): Security feature bypass in freebsd:freebsd (medium 5.8)
- [CVE-2014-3000](https://insights.sbomify.com/CVE-2014-3000/): Memory corruption in freebsd:freebsd (high 7.8)
- [CVE-2014-2996](https://insights.sbomify.com/CVE-2014-2996/): Command injection in xcloner:xcloner (high 7.1)
- [CVE-2014-2995](https://insights.sbomify.com/CVE-2014-2995/): Cross-site scripting in twitget project:twitget (low 3.5)
- [CVE-2014-2994](https://insights.sbomify.com/CVE-2014-2994/): Memory corruption in acunetix:web vulnerability scanner (critical 10.0)
- [CVE-2014-2993](https://insights.sbomify.com/CVE-2014-2993/): Weak cryptography in birebin:birebin.com app (medium 6.4)
- [CVE-2014-2992](https://insights.sbomify.com/CVE-2014-2992/): Weak cryptography in misli:misli.com app (medium 6.4)
- [CVE-2014-2989](https://insights.sbomify.com/CVE-2014-2989/): Cross-site request forgery in open assessment technologies :tao (medium 6.8)
- [CVE-2014-2988](https://insights.sbomify.com/CVE-2014-2988/): Code injection in egroupware:egroupware (high 8.5)
- [CVE-2014-2987](https://insights.sbomify.com/CVE-2014-2987/): Cross-site request forgery in egroupware:egroupware (medium 6.8)
- [CVE-2014-2986](https://insights.sbomify.com/CVE-2014-2986/): Null dereference in xen:xen (medium 5.5)
- [CVE-2014-2983](https://insights.sbomify.com/CVE-2014-2983/): Information disclosure in debian:debian linux (medium 5.0)
- [CVE-2014-2980](https://insights.sbomify.com/CVE-2014-2980/): Denial of service in gnustep:base (medium 4.3)
- [CVE-2014-2978](https://insights.sbomify.com/CVE-2014-2978/): Memory corruption in directfb:directfb (critical 10.0)
- [CVE-2014-2977](https://insights.sbomify.com/CVE-2014-2977/): Integer overflow in directfb:directfb (critical 10.0)
- [CVE-2014-2976](https://insights.sbomify.com/CVE-2014-2976/): Path traversal in sixnet:sixview manager (medium 5.0)
- [CVE-2014-2975](https://insights.sbomify.com/CVE-2014-2975/): Cross-site scripting in silver-peak:vx (medium 4.3)
- [CVE-2014-2974](https://insights.sbomify.com/CVE-2014-2974/): Cross-site request forgery in silver-peak:vx (medium 6.8)
- [CVE-2014-2972](https://insights.sbomify.com/CVE-2014-2972/): Integer overflow in exim:exim (medium 4.6)
- [CVE-2014-2971](https://insights.sbomify.com/CVE-2014-2971/): Cross-site scripting in micropact:icomplaints (low 3.5)
- [CVE-2014-2969](https://insights.sbomify.com/CVE-2014-2969/): Hardcoded credentials in netgear:gs108pe (high 8.3)
- [CVE-2014-2968](https://insights.sbomify.com/CVE-2014-2968/): Cross-site scripting in huawei:e355 (medium 4.3)
- [CVE-2014-2967](https://insights.sbomify.com/CVE-2014-2967/): Command injection in autodesk:vred (critical 10.0)
- [CVE-2014-2966](https://insights.sbomify.com/CVE-2014-2966/): Security feature bypass in caucho:resin (medium 5.0)
- [CVE-2014-2965](https://insights.sbomify.com/CVE-2014-2965/): Cross-site scripting in spamtitan:spamtitan (medium 4.3)
- [CVE-2014-2964](https://insights.sbomify.com/CVE-2014-2964/): Hardcoded credentials in cobham:aviator 700d (medium 6.9)
- [CVE-2014-2963](https://insights.sbomify.com/CVE-2014-2963/): Cross-site scripting in liferay:liferay portal (medium 4.3)
- [CVE-2014-2962](https://insights.sbomify.com/CVE-2014-2962/): Path traversal in belkin:n150 f9k1009 (high 7.8)
- [CVE-2014-2960](https://insights.sbomify.com/CVE-2014-2960/): Information disclosure in Vision Critical before 2014-05-30 (high 7.5)
- [CVE-2014-2959](https://insights.sbomify.com/CVE-2014-2959/): Command injection in dell:powervault ml6000 (critical 9.0)
- [CVE-2014-2957](https://insights.sbomify.com/CVE-2014-2957/): Memory corruption in exim:exim (medium 6.8)
- [CVE-2014-2956](https://insights.sbomify.com/CVE-2014-2956/): Missing authorization in avg:safeguard (critical 9.3)
- [CVE-2014-2955](https://insights.sbomify.com/CVE-2014-2955/): Auth bypass in raritan:dpxr20a-16 (critical 10.0)
- [CVE-2014-2951](https://insights.sbomify.com/CVE-2014-2951/): Hardcoded credentials in datumsystems:snip (critical 10.0)
- [CVE-2014-2950](https://insights.sbomify.com/CVE-2014-2950/): Missing authorization in datumsystems:snip (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/58/