# Vulnerabilities published in 2015


- [CVE-2015-1958](https://insights.sbomify.com/CVE-2015-1958/): Denial of service in ibm:websphere mq light (high 7.8)
- [CVE-2015-1957](https://insights.sbomify.com/CVE-2015-1957/): Information disclosure in ibm:websphere mq (medium 5.3)
- [CVE-2015-1956](https://insights.sbomify.com/CVE-2015-1956/): Denial of service in ibm:websphere mq light (high 7.8)
- [CVE-2015-1955](https://insights.sbomify.com/CVE-2015-1955/): Denial of service in ibm:websphere mq light (high 7.8)
- [CVE-2015-1954](https://insights.sbomify.com/CVE-2015-1954/): Memory corruption in ibm:tivoli storage manager fastback (high 7.8)
- [CVE-2015-1953](https://insights.sbomify.com/CVE-2015-1953/): Memory corruption in ibm:tivoli storage manager fastback (high 7.8)
- [CVE-2015-1952](https://insights.sbomify.com/CVE-2015-1952/): Cross-site scripting in ibm:security appscan (medium 5.4)
- [CVE-2015-1951](https://insights.sbomify.com/CVE-2015-1951/): Information disclosure in ibm:maximo asset management (low 2.1)
- [CVE-2015-1950](https://insights.sbomify.com/CVE-2015-1950/): Missing authorization in ibm:powervc (medium 4.6)
- [CVE-2015-1949](https://insights.sbomify.com/CVE-2015-1949/): Command injection in ibm:tivoli storage manager fastback (critical 10.0)
- [CVE-2015-1948](https://insights.sbomify.com/CVE-2015-1948/): Memory corruption in ibm:tivoli storage manager fastback (high 7.8)
- [CVE-2015-1947](https://insights.sbomify.com/CVE-2015-1947/): Privilege escalation in ibm:infosphere biginsights (high 7.4)
- [CVE-2015-1946](https://insights.sbomify.com/CVE-2015-1946/): Privilege escalation in ibm:websphere application server (medium 4.4)
- [CVE-2015-1945](https://insights.sbomify.com/CVE-2015-1945/): Privilege escalation in ibm:infosphere master data management server (medium 6.5)
- [CVE-2015-1944](https://insights.sbomify.com/CVE-2015-1944/): Cross-site scripting in ibm:websphere portal (low 3.5)
- [CVE-2015-1943](https://insights.sbomify.com/CVE-2015-1943/): Denial of service in ibm:websphere portal (high 7.8)
- [CVE-2015-1942](https://insights.sbomify.com/CVE-2015-1942/): Other in ibm:tivoli storage manager fastback (critical 9.3)
- [CVE-2015-1941](https://insights.sbomify.com/CVE-2015-1941/): Information disclosure in ibm:tivoli storage manager fastback (high 7.8)
- [CVE-2015-1938](https://insights.sbomify.com/CVE-2015-1938/): Command injection in ibm:tivoli storage manager fastback (critical 10.0)
- [CVE-2015-1937](https://insights.sbomify.com/CVE-2015-1937/): Missing authorization in ibm:powervc (high 7.5)
- [CVE-2015-1936](https://insights.sbomify.com/CVE-2015-1936/): Auth bypass in ibm:websphere application server (medium 6.0)
- [CVE-2015-1935](https://insights.sbomify.com/CVE-2015-1935/): Other in ibm:db2 (high 8.0)
- [CVE-2015-1934](https://insights.sbomify.com/CVE-2015-1934/): Weak cryptography in ibm:change and configuration management database (medium 5.0)
- [CVE-2015-1933](https://insights.sbomify.com/CVE-2015-1933/): Information disclosure in ibm:change and configuration management database (low 2.1)
- [CVE-2015-1932](https://insights.sbomify.com/CVE-2015-1932/): Information disclosure in ibm:websphere application server (medium 5.0)
- [CVE-2015-1931](https://insights.sbomify.com/CVE-2015-1931/): Information disclosure in ibm:java sdk (medium 5.5)
- [CVE-2015-1930](https://insights.sbomify.com/CVE-2015-1930/): Memory corruption in ibm:tivoli storage manager fastback (high 7.8)
- [CVE-2015-1929](https://insights.sbomify.com/CVE-2015-1929/): Memory corruption in ibm:tivoli storage manager fastback (high 7.8)
- [CVE-2015-1928](https://insights.sbomify.com/CVE-2015-1928/): Other in ibm:rational collaborative lifecycle management (medium 6.8)
- [CVE-2015-1927](https://insights.sbomify.com/CVE-2015-1927/): Misconfiguration in ibm:websphere application server (medium 6.8)
- [CVE-2015-1926](https://insights.sbomify.com/CVE-2015-1926/): Other in oracle:e-business suite (medium 5.5)
- [CVE-2015-1925](https://insights.sbomify.com/CVE-2015-1925/): Memory corruption in ibm:tivoli storage manager fastback (high 7.8)
- [CVE-2015-1924](https://insights.sbomify.com/CVE-2015-1924/): Memory corruption in ibm:tivoli storage manager fastback (high 7.8)
- [CVE-2015-1923](https://insights.sbomify.com/CVE-2015-1923/): Memory corruption in ibm:tivoli storage manager fastback (high 7.8)
- [CVE-2015-1922](https://insights.sbomify.com/CVE-2015-1922/): Missing authorization in ibm:db2 (low 3.5)
- [CVE-2015-1921](https://insights.sbomify.com/CVE-2015-1921/): Open redirect in ibm:websphere portal (medium 6.4)
- [CVE-2015-1920](https://insights.sbomify.com/CVE-2015-1920/): Missing authorization in ibm:websphere application server (critical 10.0)
- [CVE-2015-1919](https://insights.sbomify.com/CVE-2015-1919/): Cross-site scripting in ibm:security qradar incident forensics (medium 4.3)
- [CVE-2015-1917](https://insights.sbomify.com/CVE-2015-1917/): Cross-site scripting in ibm:websphere portal (medium 4.3)
- [CVE-2015-1916](https://insights.sbomify.com/CVE-2015-1916/): Denial of service in ibm:java (high 7.5)
- [CVE-2015-1915](https://insights.sbomify.com/CVE-2015-1915/): Information disclosure in ibm:endpoint manager family (medium 4.3)
- [CVE-2015-1914](https://insights.sbomify.com/CVE-2015-1914/): Security feature bypass in ibm:java (medium 5.0)
- [CVE-2015-1913](https://insights.sbomify.com/CVE-2015-1913/): Weak cryptography in ibm:rational test virtualization server (medium 5.0)
- [CVE-2015-1911](https://insights.sbomify.com/CVE-2015-1911/): Cross-site scripting in ibm:sterling field sales (medium 4.3)
- [CVE-2015-1910](https://insights.sbomify.com/CVE-2015-1910/): Cross-site scripting in ibm:infosphere master data management server (low 3.5)
- [CVE-2015-1909](https://insights.sbomify.com/CVE-2015-1909/): XML external entity in ibm:infosphere master data management server (medium 5.0)
- [CVE-2015-1908](https://insights.sbomify.com/CVE-2015-1908/): Cross-site scripting in ibm:websphere portal (medium 4.3)
- [CVE-2015-1907](https://insights.sbomify.com/CVE-2015-1907/): Information disclosure in ibm:rational license key server (medium 4.0)
- [CVE-2015-1906](https://insights.sbomify.com/CVE-2015-1906/): Cross-site scripting in ibm:business process manager (low 3.5)
- [CVE-2015-1905](https://insights.sbomify.com/CVE-2015-1905/): Missing authorization in ibm:business process manager (medium 4.0)
- [CVE-2015-1904](https://insights.sbomify.com/CVE-2015-1904/): Missing authorization in ibm:business process manager (low 3.5)
- [CVE-2015-1903](https://insights.sbomify.com/CVE-2015-1903/): Memory corruption in ibm:domino (critical 10.0)
- [CVE-2015-1902](https://insights.sbomify.com/CVE-2015-1902/): Memory corruption in ibm:domino (critical 10.0)
- [CVE-2015-1901](https://insights.sbomify.com/CVE-2015-1901/): Information disclosure in ibm:infosphere information server (low 1.9)
- [CVE-2015-1900](https://insights.sbomify.com/CVE-2015-1900/): Privilege escalation in ibm:infosphere datastage (high 7.2)
- [CVE-2015-1899](https://insights.sbomify.com/CVE-2015-1899/): Denial of service in ibm:websphere portal (high 7.8)
- [CVE-2015-1898](https://insights.sbomify.com/CVE-2015-1898/): Memory corruption in ibm:tivoli storage manager fastback (high 7.2)
- [CVE-2015-1897](https://insights.sbomify.com/CVE-2015-1897/): Memory corruption in ibm:tivoli storage manager fastback (high 7.2)
- [CVE-2015-1896](https://insights.sbomify.com/CVE-2015-1896/): Memory corruption in ibm:tivoli storage manager fastback (critical 10.0)
- [CVE-2015-1895](https://insights.sbomify.com/CVE-2015-1895/): Auth bypass in ibm:optim workload replay (medium 5.0)
- [CVE-2015-1894](https://insights.sbomify.com/CVE-2015-1894/): Cross-site request forgery in ibm:optim workload replay (medium 6.8)
- [CVE-2015-1893](https://insights.sbomify.com/CVE-2015-1893/): Auth bypass in ibm:websphere datapower xc10 appliance firmware (medium 6.8)
- [CVE-2015-1892](https://insights.sbomify.com/CVE-2015-1892/): Information disclosure in ibm:security access manager for web 7.0 firmware (medium 5.0)
- [CVE-2015-1890](https://insights.sbomify.com/CVE-2015-1890/): Information disclosure in ibm:general parallel file system (low 3.5)
- [CVE-2015-1889](https://insights.sbomify.com/CVE-2015-1889/): Missing authorization in ibm:infosphere biginsights (medium 6.5)
- [CVE-2015-1888](https://insights.sbomify.com/CVE-2015-1888/): Cross-site scripting in ibm:content navigator (low 3.5)
- [CVE-2015-1887](https://insights.sbomify.com/CVE-2015-1887/): Information disclosure in ibm:websphere portal (medium 5.0)
- [CVE-2015-1886](https://insights.sbomify.com/CVE-2015-1886/): Denial of service in ibm:websphere portal (high 7.8)
- [CVE-2015-1885](https://insights.sbomify.com/CVE-2015-1885/): Auth bypass in ibm:websphere application server (critical 9.3)
- [CVE-2015-1884](https://insights.sbomify.com/CVE-2015-1884/): Path traversal in ibm:business process manager (medium 4.0)
- [CVE-2015-1883](https://insights.sbomify.com/CVE-2015-1883/): Information disclosure in ibm:db2 (medium 4.0)
- [CVE-2015-1882](https://insights.sbomify.com/CVE-2015-1882/): Race condition in ibm:websphere application server (high 8.5)
- [CVE-2015-1881](https://insights.sbomify.com/CVE-2015-1881/): OpenStack Glance Denial of service by creating a large number of images (medium 4.0)
- [CVE-2015-1880](https://insights.sbomify.com/CVE-2015-1880/): Cross-site scripting in fortinet:fortios (medium 4.3)
- [CVE-2015-1879](https://insights.sbomify.com/CVE-2015-1879/): Cross-site scripting in google doc embedder:google doc embedder (medium 4.3)
- [CVE-2015-1878](https://insights.sbomify.com/CVE-2015-1878/): Security feature bypass in thalesesecurity:nshield connect firmware (medium 6.8)
- [CVE-2015-1877](https://insights.sbomify.com/CVE-2015-1877/): Command injection in debian:debian linux (high 8.8)
- [CVE-2015-1876](https://insights.sbomify.com/CVE-2015-1876/): Path traversal in estrongs:es file explorer (high 7.5)
- [CVE-2015-1875](https://insights.sbomify.com/CVE-2015-1875/): SQL injection in palosanto:elastix (high 7.5)
- [CVE-2015-1874](https://insights.sbomify.com/CVE-2015-1874/): Cross-site request forgery in cfdbplugin:contact form db (medium 6.8)
- [CVE-2015-1872](https://insights.sbomify.com/CVE-2015-1872/): Memory corruption in canonical:ubuntu linux (medium 6.8)
- [CVE-2015-1870](https://insights.sbomify.com/CVE-2015-1870/): Information disclosure in redhat:automatic bug reporting tool (medium 5.5)
- [CVE-2015-1869](https://insights.sbomify.com/CVE-2015-1869/): Privilege escalation in ABRT (high 7.8)
- [CVE-2015-1868](https://insights.sbomify.com/CVE-2015-1868/): Denial of service in fedoraproject:fedora (high 7.8)
- [CVE-2015-1867](https://insights.sbomify.com/CVE-2015-1867/): Privilege escalation in clusterlabs:pacemaker (high 7.5)
- [CVE-2015-1866](https://insights.sbomify.com/CVE-2015-1866/): ember-source vulnerable to Cross-site Scripting (medium 6.1)
- [CVE-2015-1865](https://insights.sbomify.com/CVE-2015-1865/): Race condition in gnu:coreutils (medium 5.1)
- [CVE-2015-1864](https://insights.sbomify.com/CVE-2015-1864/): Kallithea cross-site scripting (XSS) vulnerability (medium 5.4)
- [CVE-2015-1863](https://insights.sbomify.com/CVE-2015-1863/): Memory corruption in canonical:ubuntu linux (medium 5.8)
- [CVE-2015-1862](https://insights.sbomify.com/CVE-2015-1862/): Race condition in redhat:automatic bug reporting tool (high 7.0)
- [CVE-2015-1860](https://insights.sbomify.com/CVE-2015-1860/): Memory corruption in digia:qt (medium 6.8)
- [CVE-2015-1859](https://insights.sbomify.com/CVE-2015-1859/): Memory corruption in digia:qt (medium 6.8)
- [CVE-2015-1858](https://insights.sbomify.com/CVE-2015-1858/): Memory corruption in digia:qt (medium 6.8)
- [CVE-2015-1857](https://insights.sbomify.com/CVE-2015-1857/): Information disclosure in linuxfoundation:opendaylight (medium 5.3)
- [CVE-2015-1856](https://insights.sbomify.com/CVE-2015-1856/): OpenStack Swift Unauthorized delete of versioned Swift object (medium 5.5)
- [CVE-2015-1855](https://insights.sbomify.com/CVE-2015-1855/): Security feature bypass in Ruby (medium 5.9)
- [CVE-2015-1854](https://insights.sbomify.com/CVE-2015-1854/): Missing authorization in debian:debian linux (high 7.5)
- [CVE-2015-1853](https://insights.sbomify.com/CVE-2015-1853/): Denial of service in chrony (medium 6.5)
- [CVE-2015-1852](https://insights.sbomify.com/CVE-2015-1852/): OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks (medium 4.3)
- [CVE-2015-1851](https://insights.sbomify.com/CVE-2015-1851/): OpenStack Cinder file disclosure in image convert (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/63/