# Vulnerabilities published in 2014


- [CVE-2014-0907](https://insights.sbomify.com/CVE-2014-0907/): Privilege escalation in ibm:db2 (high 7.2)
- [CVE-2014-0906](https://insights.sbomify.com/CVE-2014-0906/): Auth bypass in ibm:sametime (medium 4.3)
- [CVE-2014-0905](https://insights.sbomify.com/CVE-2014-0905/): Information disclosure in ibm:infosphere biginsights (low 2.9)
- [CVE-2014-0904](https://insights.sbomify.com/CVE-2014-0904/): Security feature bypass in ibm:security appscan (high 7.6)
- [CVE-2014-0901](https://insights.sbomify.com/CVE-2014-0901/): Cross-site scripting in ibm:websphere portal (low 3.5)
- [CVE-2014-0900](https://insights.sbomify.com/CVE-2014-0900/): Security feature bypass in google:android (high 8.8)
- [CVE-2014-0899](https://insights.sbomify.com/CVE-2014-0899/): Security feature bypass in ibm:aix (medium 6.5)
- [CVE-2014-0897](https://insights.sbomify.com/CVE-2014-0897/): Weak cryptography in ibm:flex system manager (low 3.5)
- [CVE-2014-0896](https://insights.sbomify.com/CVE-2014-0896/): Information disclosure in ibm:websphere application server (medium 4.3)
- [CVE-2014-0895](https://insights.sbomify.com/CVE-2014-0895/): Memory corruption in ibm:spss samplepower (high 7.5)
- [CVE-2014-0894](https://insights.sbomify.com/CVE-2014-0894/): Information disclosure in ibm:algo credit limits (low 3.5)
- [CVE-2014-0893](https://insights.sbomify.com/CVE-2014-0893/): Cross-site scripting in ibm:maximo asset management (medium 4.3)
- [CVE-2014-0892](https://insights.sbomify.com/CVE-2014-0892/): Misconfiguration in ibm:lotus domino (medium 5.0)
- [CVE-2014-0891](https://insights.sbomify.com/CVE-2014-0891/): Information disclosure in ibm:websphere application server (medium 5.0)
- [CVE-2014-0890](https://insights.sbomify.com/CVE-2014-0890/): Information disclosure in ibm:sametime (low 1.9)
- [CVE-2014-0889](https://insights.sbomify.com/CVE-2014-0889/): Cross-site scripting in ibm:atlas ediscovery process management (medium 4.3)
- [CVE-2014-0888](https://insights.sbomify.com/CVE-2014-0888/): Auth bypass in ibm:mobile foundation (medium 4.9)
- [CVE-2014-0887](https://insights.sbomify.com/CVE-2014-0887/): Command injection in ibm:lotus protector for mail security (high 7.1)
- [CVE-2014-0886](https://insights.sbomify.com/CVE-2014-0886/): Command injection in ibm:lotus protector for mail security (high 7.1)
- [CVE-2014-0885](https://insights.sbomify.com/CVE-2014-0885/): Cross-site request forgery in ibm:lotus protector for mail security (medium 6.8)
- [CVE-2014-0884](https://insights.sbomify.com/CVE-2014-0884/): Cross-site scripting in ibm:lotus protector for mail security (low 3.5)
- [CVE-2014-0883](https://insights.sbomify.com/CVE-2014-0883/): IBM Power Hardware Management Console cross-site scripting (medium 4.3)
- [CVE-2014-0882](https://insights.sbomify.com/CVE-2014-0882/): Information disclosure in ibm:integrated management module firmware (medium 6.5)
- [CVE-2014-0881](https://insights.sbomify.com/CVE-2014-0881/): Misconfiguration in ibm:integrated management module firmware (high 7.4)
- [CVE-2014-0880](https://insights.sbomify.com/CVE-2014-0880/): Auth bypass in ibm:flex system v7000 (high 7.5)
- [CVE-2014-0879](https://insights.sbomify.com/CVE-2014-0879/): Memory corruption in ibm:datacap taskmaster capture (critical 9.3)
- [CVE-2014-0878](https://insights.sbomify.com/CVE-2014-0878/): Weak cryptography in ibm:java sdk (medium 5.8)
- [CVE-2014-0877](https://insights.sbomify.com/CVE-2014-0877/): Security feature bypass in ibm:cognos tm1 (medium 5.0)
- [CVE-2014-0876](https://insights.sbomify.com/CVE-2014-0876/): Memory corruption in ibm:tivoli storage manager (low 2.1)
- [CVE-2014-0875](https://insights.sbomify.com/CVE-2014-0875/): Security feature bypass in ibm:storwize unified v7000 (low 3.5)
- [CVE-2014-0874](https://insights.sbomify.com/CVE-2014-0874/): Cross-site scripting in ibm:content navigator (low 3.5)
- [CVE-2014-0873](https://insights.sbomify.com/CVE-2014-0873/): Cross-site request forgery in ibm:infosphere master data management server (medium 6.8)
- [CVE-2014-0872](https://insights.sbomify.com/CVE-2014-0872/): Information disclosure in ibm:security key lifecycle manager (medium 4.1)
- [CVE-2014-0871](https://insights.sbomify.com/CVE-2014-0871/): Information disclosure in ibm:algo credit limits (medium 4.3)
- [CVE-2014-0870](https://insights.sbomify.com/CVE-2014-0870/): Cross-site scripting in ibm:algo credit limits (medium 4.3)
- [CVE-2014-0869](https://insights.sbomify.com/CVE-2014-0869/): Weak cryptography in ibm:algo credit limits (medium 4.3)
- [CVE-2014-0868](https://insights.sbomify.com/CVE-2014-0868/): Security feature bypass in ibm:algo credit limits (medium 4.9)
- [CVE-2014-0867](https://insights.sbomify.com/CVE-2014-0867/): Other in ibm:algo credit limits (medium 5.8)
- [CVE-2014-0866](https://insights.sbomify.com/CVE-2014-0866/): Information disclosure in ibm:algo credit limits (medium 4.3)
- [CVE-2014-0865](https://insights.sbomify.com/CVE-2014-0865/): Security feature bypass in ibm:algo credit limits (medium 4.9)
- [CVE-2014-0864](https://insights.sbomify.com/CVE-2014-0864/): Cross-site request forgery in ibm:algo credit limits (medium 6.8)
- [CVE-2014-0863](https://insights.sbomify.com/CVE-2014-0863/): Information disclosure in ibm:cognos tm1 (medium 4.0)
- [CVE-2014-0862](https://insights.sbomify.com/CVE-2014-0862/): Other in ibm:rational collaborative lifecycle management (critical 10.0)
- [CVE-2014-0861](https://insights.sbomify.com/CVE-2014-0861/): Cross-site scripting in ibm:cognos business intelligence (low 3.5)
- [CVE-2014-0860](https://insights.sbomify.com/CVE-2014-0860/): Hardcoded credentials in ibm:advanced management module (medium 5.0)
- [CVE-2014-0859](https://insights.sbomify.com/CVE-2014-0859/): Denial of service in ibm:websphere application server (medium 5.0)
- [CVE-2014-0858](https://insights.sbomify.com/CVE-2014-0858/): Missing authorization in ibm:content navigator (low 3.5)
- [CVE-2014-0857](https://insights.sbomify.com/CVE-2014-0857/): Information disclosure in ibm:websphere application server (medium 4.0)
- [CVE-2014-0855](https://insights.sbomify.com/CVE-2014-0855/): Cross-site scripting in ibm:connections portlets (medium 4.3)
- [CVE-2014-0854](https://insights.sbomify.com/CVE-2014-0854/): XML external entity in ibm:cognos business intelligence (medium 5.0)
- [CVE-2014-0853](https://insights.sbomify.com/CVE-2014-0853/): Cross-site scripting in ibm:rational focal point (low 3.5)
- [CVE-2014-0852](https://insights.sbomify.com/CVE-2014-0852/): Weak cryptography in ibm:websphere datapower soa appliance (medium 4.3)
- [CVE-2014-0850](https://insights.sbomify.com/CVE-2014-0850/): Cross-site scripting in ibm:infosphere master data management reference data management hub (low 3.5)
- [CVE-2014-0849](https://insights.sbomify.com/CVE-2014-0849/): Privilege escalation in ibm:maximo asset management (medium 6.0)
- [CVE-2014-0848](https://insights.sbomify.com/CVE-2014-0848/): Weak cryptography in ibm:netezza performance portal (low 3.5)
- [CVE-2014-0846](https://insights.sbomify.com/CVE-2014-0846/): Cross-site scripting in ibm:rational doors next generation (low 3.5)
- [CVE-2014-0845](https://insights.sbomify.com/CVE-2014-0845/): Open redirect in ibm:rational doors next generation (medium 4.9)
- [CVE-2014-0844](https://insights.sbomify.com/CVE-2014-0844/): Information disclosure in ibm:rational doors next generation (low 3.5)
- [CVE-2014-0843](https://insights.sbomify.com/CVE-2014-0843/): Cross-site scripting in ibm:rational focal point (low 3.5)
- [CVE-2014-0842](https://insights.sbomify.com/CVE-2014-0842/): Information disclosure in ibm:rational focal point (medium 5.0)
- [CVE-2014-0841](https://insights.sbomify.com/CVE-2014-0841/): Weak cryptography in ibm:rational focal point (medium 5.3)
- [CVE-2014-0840](https://insights.sbomify.com/CVE-2014-0840/): Cross-site scripting in ibm:rational focal point (low 3.5)
- [CVE-2014-0839](https://insights.sbomify.com/CVE-2014-0839/): Missing authorization in ibm:rational focal point (medium 4.0)
- [CVE-2014-0838](https://insights.sbomify.com/CVE-2014-0838/): Command injection in ibm:qradar security information and event manager (high 7.5)
- [CVE-2014-0837](https://insights.sbomify.com/CVE-2014-0837/): Weak cryptography in ibm:qradar security information and event manager (medium 4.3)
- [CVE-2014-0836](https://insights.sbomify.com/CVE-2014-0836/): Cross-site scripting in ibm:qradar security information and event manager (medium 4.3)
- [CVE-2014-0835](https://insights.sbomify.com/CVE-2014-0835/): Cross-site request forgery in ibm:qradar security information and event manager (medium 6.8)
- [CVE-2014-0834](https://insights.sbomify.com/CVE-2014-0834/): Denial of service in ibm:general parallel file system (medium 4.0)
- [CVE-2014-0833](https://insights.sbomify.com/CVE-2014-0833/): Security feature bypass in ibm:financial transaction manager (medium 5.5)
- [CVE-2014-0832](https://insights.sbomify.com/CVE-2014-0832/): Cross-site scripting in ibm:financial transaction manager (low 3.5)
- [CVE-2014-0831](https://insights.sbomify.com/CVE-2014-0831/): Cross-site request forgery in ibm:financial transaction manager (medium 6.8)
- [CVE-2014-0830](https://insights.sbomify.com/CVE-2014-0830/): Path traversal in ibm:financial transaction manager (medium 4.0)
- [CVE-2014-0829](https://insights.sbomify.com/CVE-2014-0829/): Memory corruption in ibm:rational clearcase (medium 6.5)
- [CVE-2014-0828](https://insights.sbomify.com/CVE-2014-0828/): Cross-site scripting in ibm:websphere portal (medium 4.3)
- [CVE-2014-0827](https://insights.sbomify.com/CVE-2014-0827/): Cross-site scripting in ibm:optim workload replay (medium 4.3)
- [CVE-2014-0825](https://insights.sbomify.com/CVE-2014-0825/): Cross-site scripting in ibm:change and configuration management database (low 3.5)
- [CVE-2014-0824](https://insights.sbomify.com/CVE-2014-0824/): Cross-site scripting in ibm:change and configuration management database (low 3.5)
- [CVE-2014-0823](https://insights.sbomify.com/CVE-2014-0823/): Information disclosure in ibm:websphere application server (medium 4.3)
- [CVE-2014-0822](https://insights.sbomify.com/CVE-2014-0822/): Denial of service in ibm:lotus domino (high 7.8)
- [CVE-2014-0821](https://insights.sbomify.com/CVE-2014-0821/): SQL injection in cybozu:garoon (medium 6.5)
- [CVE-2014-0820](https://insights.sbomify.com/CVE-2014-0820/): Path traversal in cybozu:garoon (medium 4.0)
- [CVE-2014-0819](https://insights.sbomify.com/CVE-2014-0819/): Other in autodesk:autocad (medium 4.4)
- [CVE-2014-0818](https://insights.sbomify.com/CVE-2014-0818/): Code injection in autodesk:autocad (high 7.5)
- [CVE-2014-0817](https://insights.sbomify.com/CVE-2014-0817/): Auth bypass in cybozu:garoon (medium 4.9)
- [CVE-2014-0816](https://insights.sbomify.com/CVE-2014-0816/): Privilege escalation in norman:security suite (high 7.2)
- [CVE-2014-0815](https://insights.sbomify.com/CVE-2014-0815/): Information disclosure in opera:opera browser (medium 4.3)
- [CVE-2014-0814](https://insights.sbomify.com/CVE-2014-0814/): Cross-site scripting in phpmyfaq:phpmyfaq (medium 4.3)
- [CVE-2014-0813](https://insights.sbomify.com/CVE-2014-0813/): Cross-site request forgery in phpmyfaq:phpmyfaq (medium 6.8)
- [CVE-2014-0812](https://insights.sbomify.com/CVE-2014-0812/): Cross-site scripting in kent-web:joyful note (medium 4.3)
- [CVE-2014-0811](https://insights.sbomify.com/CVE-2014-0811/): Cross-site scripting in blackboard:vista\/ce (medium 4.3)
- [CVE-2014-0810](https://insights.sbomify.com/CVE-2014-0810/): Other in justsystems:sanshiro (high 7.5)
- [CVE-2014-0809](https://insights.sbomify.com/CVE-2014-0809/): Path traversal in gapless player:simzip (medium 4.3)
- [CVE-2014-0808](https://insights.sbomify.com/CVE-2014-0808/): EC-CUBE vulnerable to authorization bypass (critical 9.1)
- [CVE-2014-0807](https://insights.sbomify.com/CVE-2014-0807/): Missing authorization in lockon:ec-cube (medium 6.4)
- [CVE-2014-0806](https://insights.sbomify.com/CVE-2014-0806/): Information disclosure in fenrir-inc:sleipnir mobile (medium 4.3)
- [CVE-2014-0805](https://insights.sbomify.com/CVE-2014-0805/): Path traversal in skyarts:neofiler (medium 5.8)
- [CVE-2014-0804](https://insights.sbomify.com/CVE-2014-0804/): Path traversal in cgene:security file manager (medium 5.8)
- [CVE-2014-0803](https://insights.sbomify.com/CVE-2014-0803/): Path traversal in yuichiro okuyama:tetra filer (medium 5.8)
- [CVE-2014-0802](https://insights.sbomify.com/CVE-2014-0802/): Path traversal in aokitaka:zip with pass (medium 5.8)
- [CVE-2014-0794](https://insights.sbomify.com/CVE-2014-0794/): SQL injection in joomla:com jvcomment (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/77/