# Vulnerabilities published in 2015


- [CVE-2015-5051](https://insights.sbomify.com/CVE-2015-5051/): Missing authorization in ibm:maximo asset management (medium 4.3)
- [CVE-2015-5050](https://insights.sbomify.com/CVE-2015-5050/): Cross-site request forgery in ibm:emptoris contract management (high 8.8)
- [CVE-2015-5049](https://insights.sbomify.com/CVE-2015-5049/): SQL injection in ibm:openpages grc platform (medium 5.4)
- [CVE-2015-5045](https://insights.sbomify.com/CVE-2015-5045/): Information disclosure in ibm:rational license key server (low 3.3)
- [CVE-2015-5044](https://insights.sbomify.com/CVE-2015-5044/): Denial of service in ibm:qradar security information and event manager (low 3.3)
- [CVE-2015-5043](https://insights.sbomify.com/CVE-2015-5043/): Privilege escalation in ibm:security guardium (high 7.2)
- [CVE-2015-5042](https://insights.sbomify.com/CVE-2015-5042/): Code injection in ibm:emptoris contract management (high 7.5)
- [CVE-2015-5041](https://insights.sbomify.com/CVE-2015-5041/): Information disclosure in ibm:java sdk (critical 9.1)
- [CVE-2015-5040](https://insights.sbomify.com/CVE-2015-5040/): Memory corruption in ibm:domino (high 7.5)
- [CVE-2015-5039](https://insights.sbomify.com/CVE-2015-5039/): Weak cryptography in ibm:rational clearcase (high 7.4)
- [CVE-2015-5038](https://insights.sbomify.com/CVE-2015-5038/): XML external entity in ibm:connections (high 7.5)
- [CVE-2015-5037](https://insights.sbomify.com/CVE-2015-5037/): Cross-site request forgery in ibm:connections (medium 5.4)
- [CVE-2015-5036](https://insights.sbomify.com/CVE-2015-5036/): Cross-site scripting in ibm:connections (medium 5.4)
- [CVE-2015-5035](https://insights.sbomify.com/CVE-2015-5035/): Cross-site scripting in ibm:connections (medium 5.4)
- [CVE-2015-5024](https://insights.sbomify.com/CVE-2015-5024/): Information disclosure in ibm:emptoris sourcing (medium 4.0)
- [CVE-2015-5023](https://insights.sbomify.com/CVE-2015-5023/): SQL injection in ibm:curam social program management (medium 5.4)
- [CVE-2015-5022](https://insights.sbomify.com/CVE-2015-5022/): Information disclosure in ibm:b2b advanced communications (medium 4.3)
- [CVE-2015-5021](https://insights.sbomify.com/CVE-2015-5021/): Security feature bypass in ibm:infosphere information server (medium 5.5)
- [CVE-2015-5020](https://insights.sbomify.com/CVE-2015-5020/): Missing authorization in ibm:infosphere biginsights (medium 4.3)
- [CVE-2015-5019](https://insights.sbomify.com/CVE-2015-5019/): Missing authorization in ibm:sterling b2b integrator (medium 5.5)
- [CVE-2015-5018](https://insights.sbomify.com/CVE-2015-5018/): Command injection in ibm:security access manager 9.0 firmware (high 8.0)
- [CVE-2015-5017](https://insights.sbomify.com/CVE-2015-5017/): Auth bypass in ibm:change and configuration management database (medium 5.4)
- [CVE-2015-5016](https://insights.sbomify.com/CVE-2015-5016/): Missing authorization in ibm:change and configuration management database (medium 4.3)
- [CVE-2015-5015](https://insights.sbomify.com/CVE-2015-5015/): Information disclosure in ibm:websphere commerce enterprise (medium 5.0)
- [CVE-2015-5014](https://insights.sbomify.com/CVE-2015-5014/): Security feature bypass in ibm:cognos disclosure management (critical 9.3)
- [CVE-2015-5013](https://insights.sbomify.com/CVE-2015-5013/): Information disclosure in Access Manager (medium 5.5)
- [CVE-2015-5012](https://insights.sbomify.com/CVE-2015-5012/): Weak cryptography in ibm:security access manager 9.0 firmware (high 7.5)
- [CVE-2015-5011](https://insights.sbomify.com/CVE-2015-5011/): Missing authorization in ibm:integration bus (low 3.2)
- [CVE-2015-5010](https://insights.sbomify.com/CVE-2015-5010/): Auth bypass in ibm:security access manager 9.0 firmware (high 7.5)
- [CVE-2015-5009](https://insights.sbomify.com/CVE-2015-5009/): Cross-site scripting in ibm:websphere commerce (medium 5.4)
- [CVE-2015-5008](https://insights.sbomify.com/CVE-2015-5008/): Cross-site scripting in ibm:websphere commerce (medium 6.1)
- [CVE-2015-5007](https://insights.sbomify.com/CVE-2015-5007/): Cross-site request forgery in ibm:websphere commerce (high 8.8)
- [CVE-2015-5006](https://insights.sbomify.com/CVE-2015-5006/): Information disclosure in ibm:java 2 sdk (low 2.1)
- [CVE-2015-5005](https://insights.sbomify.com/CVE-2015-5005/): Privilege escalation in ibm:powerha system mirror (high 8.5)
- [CVE-2015-5004](https://insights.sbomify.com/CVE-2015-5004/): Weak cryptography in ibm:websphere application server (medium 4.0)
- [CVE-2015-5003](https://insights.sbomify.com/CVE-2015-5003/): Command injection in ibm:tivoli monitoring (high 8.5)
- [CVE-2015-5002](https://insights.sbomify.com/CVE-2015-5002/): Cross-site scripting in ibm:host on-demand (medium 6.1)
- [CVE-2015-5001](https://insights.sbomify.com/CVE-2015-5001/): Denial of service in ibm:websphere portal (medium 4.3)
- [CVE-2015-4998](https://insights.sbomify.com/CVE-2015-4998/): Cross-site scripting in ibm:websphere portal (medium 6.1)
- [CVE-2015-4997](https://insights.sbomify.com/CVE-2015-4997/): Auth bypass in ibm:websphere portal (medium 6.8)
- [CVE-2015-4996](https://insights.sbomify.com/CVE-2015-4996/): Information disclosure in ibm:rational clearquest (medium 5.1)
- [CVE-2015-4994](https://insights.sbomify.com/CVE-2015-4994/): Memory corruption in ibm:domino (high 7.5)
- [CVE-2015-4993](https://insights.sbomify.com/CVE-2015-4993/): Cross-site scripting in ibm:websphere portal (medium 6.1)
- [CVE-2015-4992](https://insights.sbomify.com/CVE-2015-4992/): Other in ibm:sterling b2b integrator (low 3.5)
- [CVE-2015-4991](https://insights.sbomify.com/CVE-2015-4991/): Information disclosure in ibm:spss modeler (medium 4.0)
- [CVE-2015-4990](https://insights.sbomify.com/CVE-2015-4990/): Information disclosure in ibm:tealeaf customer experience (medium 4.0)
- [CVE-2015-4989](https://insights.sbomify.com/CVE-2015-4989/): Missing authorization in ibm:tealeaf customer experience (low 3.7)
- [CVE-2015-4988](https://insights.sbomify.com/CVE-2015-4988/): Path traversal in ibm:tealeaf customer experience (high 8.6)
- [CVE-2015-4987](https://insights.sbomify.com/CVE-2015-4987/): Auth bypass in ibm:tealeaf customer experience (medium 6.5)
- [CVE-2015-4981](https://insights.sbomify.com/CVE-2015-4981/): Information disclosure in ibm:general parallel file system (low 2.1)
- [CVE-2015-4980](https://insights.sbomify.com/CVE-2015-4980/): Information disclosure in ibm:websphere commerce (medium 4.0)
- [CVE-2015-4974](https://insights.sbomify.com/CVE-2015-4974/): Command injection in ibm:general parallel file system (high 7.2)
- [CVE-2015-4973](https://insights.sbomify.com/CVE-2015-4973/): Cross-site scripting in ibm:b2b advanced communications (medium 4.3)
- [CVE-2015-4971](https://insights.sbomify.com/CVE-2015-4971/): Cross-site scripting in ibm:emptoris (low 3.5)
- [CVE-2015-4967](https://insights.sbomify.com/CVE-2015-4967/): SQL injection in ibm:change and configuration management database (medium 6.5)
- [CVE-2015-4966](https://insights.sbomify.com/CVE-2015-4966/): Hardcoded credentials in ibm:change and configuration management database (medium 6.5)
- [CVE-2015-4965](https://insights.sbomify.com/CVE-2015-4965/): Information disclosure in ibm:change and configuration management database (medium 4.0)
- [CVE-2015-4964](https://insights.sbomify.com/CVE-2015-4964/): Information disclosure in ibm:urbancode deploy (medium 6.0)
- [CVE-2015-4963](https://insights.sbomify.com/CVE-2015-4963/): Path traversal in ibm:security access manager for web (high 7.5)
- [CVE-2015-4962](https://insights.sbomify.com/CVE-2015-4962/): Information disclosure in ibm:rational collaborative lifecycle management (low 3.5)
- [CVE-2015-4961](https://insights.sbomify.com/CVE-2015-4961/): Information disclosure in ibm:tealeaf customer experience (low 2.6)
- [CVE-2015-4960](https://insights.sbomify.com/CVE-2015-4960/): Other in ibm:infosphere master data management (medium 4.1)
- [CVE-2015-4959](https://insights.sbomify.com/CVE-2015-4959/): Cross-site scripting in ibm:tivoli federated identity manager (medium 6.1)
- [CVE-2015-4958](https://insights.sbomify.com/CVE-2015-4958/): Information disclosure in ibm:infosphere master data management (low 3.3)
- [CVE-2015-4957](https://insights.sbomify.com/CVE-2015-4957/): Cross-site scripting in ibm:qradar security information and event manager (medium 5.4)
- [CVE-2015-4956](https://insights.sbomify.com/CVE-2015-4956/): Command injection in ibm:qradar security information and event manager (high 7.4)
- [CVE-2015-4955](https://insights.sbomify.com/CVE-2015-4955/): Cross-site scripting in ibm:business process manager (low 3.5)
- [CVE-2015-4954](https://insights.sbomify.com/CVE-2015-4954/): Security feature bypass in ibm:bigfix remote control (medium 5.9)
- [CVE-2015-4953](https://insights.sbomify.com/CVE-2015-4953/): Weak cryptography in ibm:bigfix remote control (medium 4.8)
- [CVE-2015-4952](https://insights.sbomify.com/CVE-2015-4952/): Other in ibm:endpoint manager for remote control (high 8.8)
- [CVE-2015-4951](https://insights.sbomify.com/CVE-2015-4951/): Denial of service in ibm:tivoli storage manager (medium 5.3)
- [CVE-2015-4950](https://insights.sbomify.com/CVE-2015-4950/): Information disclosure in ibm:tivoli storage fastback for microsoft exchange (medium 4.0)
- [CVE-2015-4949](https://insights.sbomify.com/CVE-2015-4949/): Information disclosure in ibm:tivoli storage flashcopy manager (low 2.1)
- [CVE-2015-4948](https://insights.sbomify.com/CVE-2015-4948/): Privilege escalation in ibm:aix (medium 6.9)
- [CVE-2015-4947](https://insights.sbomify.com/CVE-2015-4947/): Memory corruption in ibm:http server (critical 9.0)
- [CVE-2015-4946](https://insights.sbomify.com/CVE-2015-4946/): Security feature bypass in ibm:rational collaborative lifecycle management (low 3.3)
- [CVE-2015-4945](https://insights.sbomify.com/CVE-2015-4945/): Security feature bypass in ibm:maximo anywhere (medium 5.0)
- [CVE-2015-4944](https://insights.sbomify.com/CVE-2015-4944/): Cross-site scripting in ibm:change and configuration management database (low 3.5)
- [CVE-2015-4943](https://insights.sbomify.com/CVE-2015-4943/): Denial of service in ibm:websphere mq light (medium 5.3)
- [CVE-2015-4942](https://insights.sbomify.com/CVE-2015-4942/): Denial of service in ibm:websphere mq light (medium 5.3)
- [CVE-2015-4941](https://insights.sbomify.com/CVE-2015-4941/): Denial of service in ibm:websphere mq light (medium 5.3)
- [CVE-2015-4940](https://insights.sbomify.com/CVE-2015-4940/): Information disclosure in apache:ambari (low 2.1)
- [CVE-2015-4939](https://insights.sbomify.com/CVE-2015-4939/): Cross-site scripting in ibm:emptoris program management (medium 4.3)
- [CVE-2015-4938](https://insights.sbomify.com/CVE-2015-4938/): Other in ibm:websphere application server (medium 5.0)
- [CVE-2015-4936](https://insights.sbomify.com/CVE-2015-4936/): Denial of service in ibm:websphere extreme scale (medium 5.0)
- [CVE-2015-4935](https://insights.sbomify.com/CVE-2015-4935/): Memory corruption in ibm:tivoli storage manager fastback (critical 10.0)
- [CVE-2015-4934](https://insights.sbomify.com/CVE-2015-4934/): Memory corruption in ibm:tivoli storage manager fastback (critical 10.0)
- [CVE-2015-4933](https://insights.sbomify.com/CVE-2015-4933/): Memory corruption in ibm:tivoli storage manager fastback (critical 10.0)
- [CVE-2015-4932](https://insights.sbomify.com/CVE-2015-4932/): Memory corruption in ibm:tivoli storage manager fastback (critical 10.0)
- [CVE-2015-4931](https://insights.sbomify.com/CVE-2015-4931/): Memory corruption in ibm:tivoli storage manager fastback (critical 10.0)
- [CVE-2015-4930](https://insights.sbomify.com/CVE-2015-4930/): Command injection in ibm:qradar security information and event manager (critical 9.0)
- [CVE-2015-4929](https://insights.sbomify.com/CVE-2015-4929/): Missing authorization in ibm:license metric tool (medium 4.0)
- [CVE-2015-4928](https://insights.sbomify.com/CVE-2015-4928/): Information disclosure in apache:ambari (medium 4.3)
- [CVE-2015-4927](https://insights.sbomify.com/CVE-2015-4927/): Misconfiguration in ibm:tivoli storage manager (high 7.2)
- [CVE-2015-4926](https://insights.sbomify.com/CVE-2015-4926/): Other in oracle:e-business suite (low 2.6)
- [CVE-2015-4925](https://insights.sbomify.com/CVE-2015-4925/): Other in oracle:database server (medium 6.5)
- [CVE-2015-4924](https://insights.sbomify.com/CVE-2015-4924/): Other in oracle:supply chain products suite (low 3.5)
- [CVE-2015-4923](https://insights.sbomify.com/CVE-2015-4923/): Denial of service in oracle:database server (medium 4.0)
- [CVE-2015-4922](https://insights.sbomify.com/CVE-2015-4922/): Other in oracle:solaris (low 2.1)
- [CVE-2015-4921](https://insights.sbomify.com/CVE-2015-4921/): Other in oracle:database server (medium 4.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/38/