# Vulnerabilities published in 2016


- [CVE-2016-8301](https://insights.sbomify.com/CVE-2016-8301/): Missing authorization in FLEXCUBE Universal Banking (medium 4.3)
- [CVE-2016-8300](https://insights.sbomify.com/CVE-2016-8300/): Missing authorization in FLEXCUBE Private Banking (medium 5.3)
- [CVE-2016-8299](https://insights.sbomify.com/CVE-2016-8299/): Missing authorization in FLEXCUBE Universal Banking (medium 6.3)
- [CVE-2016-8298](https://insights.sbomify.com/CVE-2016-8298/): Missing authorization in FLEXCUBE Private Banking 2.0.1;2.2.0;12.0.1 (high 8.1)
- [CVE-2016-8297](https://insights.sbomify.com/CVE-2016-8297/): Missing authorization in FLEXCUBE Universal Banking (high 8.1)
- [CVE-2016-8296](https://insights.sbomify.com/CVE-2016-8296/): Missing authorization in n/a (high 7.6)
- [CVE-2016-8295](https://insights.sbomify.com/CVE-2016-8295/): Information disclosure in n/a (medium 4.3)
- [CVE-2016-8294](https://insights.sbomify.com/CVE-2016-8294/): Information disclosure in n/a (medium 4.3)
- [CVE-2016-8293](https://insights.sbomify.com/CVE-2016-8293/): Missing authorization in n/a (high 8.2)
- [CVE-2016-8292](https://insights.sbomify.com/CVE-2016-8292/): Missing authorization in n/a (medium 4.2)
- [CVE-2016-8291](https://insights.sbomify.com/CVE-2016-8291/): Missing authorization in n/a (high 8.2)
- [CVE-2016-8290](https://insights.sbomify.com/CVE-2016-8290/): Denial of service in n/a (medium 4.4)
- [CVE-2016-8289](https://insights.sbomify.com/CVE-2016-8289/): Other in n/a (medium 4.7)
- [CVE-2016-8288](https://insights.sbomify.com/CVE-2016-8288/): Missing authorization in n/a (low 3.1)
- [CVE-2016-8287](https://insights.sbomify.com/CVE-2016-8287/): Denial of service in n/a (medium 4.5)
- [CVE-2016-8286](https://insights.sbomify.com/CVE-2016-8286/): Information disclosure in n/a (low 3.1)
- [CVE-2016-8285](https://insights.sbomify.com/CVE-2016-8285/): Missing authorization in n/a (medium 4.8)
- [CVE-2016-8284](https://insights.sbomify.com/CVE-2016-8284/): Denial of service in n/a (low 1.8)
- [CVE-2016-8283](https://insights.sbomify.com/CVE-2016-8283/): Denial of service in n/a (medium 4.3)
- [CVE-2016-8282](https://insights.sbomify.com/CVE-2016-8282/): Missing authorization in FLEXCUBE Private Banking (medium 6.1)
- [CVE-2016-8281](https://insights.sbomify.com/CVE-2016-8281/): Missing authorization in n/a (high 7.6)
- [CVE-2016-8280](https://insights.sbomify.com/CVE-2016-8280/): Path traversal in n/a (medium 6.5)
- [CVE-2016-8279](https://insights.sbomify.com/CVE-2016-8279/): Denial of service in n/a (medium 5.5)
- [CVE-2016-8278](https://insights.sbomify.com/CVE-2016-8278/): Denial of service in n/a (high 7.5)
- [CVE-2016-8277](https://insights.sbomify.com/CVE-2016-8277/): Denial of service in n/a (medium 6.5)
- [CVE-2016-8276](https://insights.sbomify.com/CVE-2016-8276/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-8275](https://insights.sbomify.com/CVE-2016-8275/): Denial of service in AnyOffice V200R006C00 (medium 6.5)
- [CVE-2016-8274](https://insights.sbomify.com/CVE-2016-8274/): Other in HiSuite 4.0.5.300 OVE (high 7.8)
- [CVE-2016-8273](https://insights.sbomify.com/CVE-2016-8273/): Supply chain in HiSuite 4.0.5.300 OVE (high 7.8)
- [CVE-2016-8272](https://insights.sbomify.com/CVE-2016-8272/): Information disclosure in HiSuite 4.0.5.300 OVE (medium 5.3)
- [CVE-2016-8271](https://insights.sbomify.com/CVE-2016-8271/): Information disclosure in eSpace IAD V300R002C01SPC100 and earlier versions (medium 5.3)
- [CVE-2016-8237](https://insights.sbomify.com/CVE-2016-8237/): Code injection in Lenovo Updates (high 8.1)
- [CVE-2016-8236](https://insights.sbomify.com/CVE-2016-8236/): Denial of service in ThinkServer RD350, RD450, RD550, RD650, TD350 (high 7.5)
- [CVE-2016-8235](https://insights.sbomify.com/CVE-2016-8235/): Privilege escalation in Customer Care Software Development Kit (CCSDK) (high 7.8)
- [CVE-2016-8233](https://insights.sbomify.com/CVE-2016-8233/): Information disclosure in XClarity Administrator (critical 9.8)
- [CVE-2016-8232](https://insights.sbomify.com/CVE-2016-8232/): Cross-site scripting in Lenovo IBM BladeCenter HS22, HS22V, HS23, HS23E, HX5 Earlier than 66Z (medium 6.1)
- [CVE-2016-8231](https://insights.sbomify.com/CVE-2016-8231/): Security feature bypass in Service Bridge (high 7.5)
- [CVE-2016-8230](https://insights.sbomify.com/CVE-2016-8230/): Information disclosure in Service Bridge (high 7.5)
- [CVE-2016-8229](https://insights.sbomify.com/CVE-2016-8229/): Cross-site request forgery in Service Bridge (high 8.8)
- [CVE-2016-8228](https://insights.sbomify.com/CVE-2016-8228/): Privilege escalation in Service Bridge (high 7.8)
- [CVE-2016-8227](https://insights.sbomify.com/CVE-2016-8227/): Privilege escalation in Transition application (high 7.8)
- [CVE-2016-8226](https://insights.sbomify.com/CVE-2016-8226/): Denial of service in System X M5, M6, and X6 BIOS (medium 4.9)
- [CVE-2016-8225](https://insights.sbomify.com/CVE-2016-8225/): Privilege escalation in Edge and Slim USB Keyboard Driver (high 7.8)
- [CVE-2016-8224](https://insights.sbomify.com/CVE-2016-8224/): Privilege escalation in Lenovo Notebook models 110-14IBR/110-15IBR, B70-80, E31-80, E40-80, E41-80, E51-80, G40-80, G50-80, G50-80 Touch, Ideapad 300-14IBR/300-15IBR, Ideapad 300-14ISK/300-15ISK/300-17ISK, Ideapad 510S-12ISK, K21-80, K41-80, MIIX 710-12IKB , XiaoXin Air 12, YOGA 510-14ISK/510-15ISK, YOGA 710-11IKB, Yoga 710-11ISK, Yoga 900-13ISK, YOGA 900S-12ISK; ThinkServer models ThinkServer TS150, ThinkServer TS450 (medium 4.4)
- [CVE-2016-8223](https://insights.sbomify.com/CVE-2016-8223/): Privilege escalation in All ThinkPad, ThinkCentre, ThinkStation and Lenovo-branded systems preloaded with the Windows 10 operating system, or any system running Lenovo Companion, Lenovo Settings, or Lenovo ID. (high 7.8)
- [CVE-2016-8222](https://insights.sbomify.com/CVE-2016-8222/): Privilege escalation in ThinkPad systems (medium 4.4)
- [CVE-2016-8221](https://insights.sbomify.com/CVE-2016-8221/): Information disclosure in XClarity Administrator (LXCA) (high 7.0)
- [CVE-2016-8220](https://insights.sbomify.com/CVE-2016-8220/): Information disclosure in Gemfire for PCF (high 7.5)
- [CVE-2016-8219](https://insights.sbomify.com/CVE-2016-8219/): Privilege escalation in Cloud Foundry (medium 6.5)
- [CVE-2016-8218](https://insights.sbomify.com/CVE-2016-8218/): Auth bypass in Cloud Foundry (critical 9.8)
- [CVE-2016-8217](https://insights.sbomify.com/CVE-2016-8217/): Information disclosure in RSA BSAFE Crypto-J RSA BSAFE Crypto-J versions prior to 6.2.2 (low 3.7)
- [CVE-2016-8216](https://insights.sbomify.com/CVE-2016-8216/): Command injection in EMC Data Domain DD OS EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS) 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS (DD OS) 5.7 family all versions prior to 5.7.2.10 (medium 6.7)
- [CVE-2016-8215](https://insights.sbomify.com/CVE-2016-8215/): Cross-site scripting in EMC RSA Security Analytics versions prior to 10.6.2 (medium 6.1)
- [CVE-2016-8214](https://insights.sbomify.com/CVE-2016-8214/): Privilege escalation in EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3.0 and 7.3.1 (medium 6.7)
- [CVE-2016-8213](https://insights.sbomify.com/CVE-2016-8213/): Cross-site scripting in EMC Documentum Webtop and Clients (medium 6.1)
- [CVE-2016-8212](https://insights.sbomify.com/CVE-2016-8212/): Security feature bypass in RSA BSAFE Crypto-J RSA BSAFE Crypto-J versions prior to 6.2.2 (high 7.5)
- [CVE-2016-8211](https://insights.sbomify.com/CVE-2016-8211/): Path traversal in EMC Data Protection Advisor EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2, EMC Data Protection Advisor 6.2.3 prior to patch 446 (high 7.5)
- [CVE-2016-8209](https://insights.sbomify.com/CVE-2016-8209/): Denial of service in NetIron XMR/MLX and Brocade CES/CER on NetIron (high 7.5)
- [CVE-2016-8207](https://insights.sbomify.com/CVE-2016-8207/): Path traversal in Brocade Network Advisor versions released prior to and including 14.0.2 (high 7.5)
- [CVE-2016-8206](https://insights.sbomify.com/CVE-2016-8206/): Path traversal in Brocade Network Advisor versions released prior to and including 14.0.2 (high 7.5)
- [CVE-2016-8205](https://insights.sbomify.com/CVE-2016-8205/): Path traversal in Brocade Network Advisor versions released prior to and including 14.0.2 (critical 9.8)
- [CVE-2016-8204](https://insights.sbomify.com/CVE-2016-8204/): Path traversal in Brocade Network Advisor versions released prior to and including 14.0.2 (critical 9.8)
- [CVE-2016-8203](https://insights.sbomify.com/CVE-2016-8203/): Memory corruption in Brocade MLX running on NetIron OS All Brocade MLX Line Cards running NetIron OS 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00 and 6.0.00a images (high 7.5)
- [CVE-2016-8202](https://insights.sbomify.com/CVE-2016-8202/): Privilege escalation in Fibre Channel SAN products running Brocade Fabric OS (FOS). (high 8.8)
- [CVE-2016-8201](https://insights.sbomify.com/CVE-2016-8201/): Cross-site request forgery in Brocade Virtual Traffic Manager versions released prior to and including 11.0 (high 8.0)
- [CVE-2016-8106](https://insights.sbomify.com/CVE-2016-8106/): Denial of service in Intel® Ethernet Controller X710 family and Intel® Ethernet Controller XL710 family (medium 5.9)
- [CVE-2016-8105](https://insights.sbomify.com/CVE-2016-8105/): Denial of service in Intel Ethernet Controller X710 family and Intel Ethernet Controller XL710 family (medium 6.5)
- [CVE-2016-8104](https://insights.sbomify.com/CVE-2016-8104/): Memory corruption in Intel PROSet/Wireless Software and Drivers (medium 5.5)
- [CVE-2016-8103](https://insights.sbomify.com/CVE-2016-8103/): Privilege escalation in NUC Kits (medium 6.7)
- [CVE-2016-8102](https://insights.sbomify.com/CVE-2016-8102/): Privilege escalation in Intel Wireless Bluetooth Drivers (high 7.8)
- [CVE-2016-8101](https://insights.sbomify.com/CVE-2016-8101/): The updater subsystem in Intel SSD Toolbox before 3.3.7 allows local users to gain privileges via unspecified vectors. (high 7.8)
- [CVE-2016-8100](https://insights.sbomify.com/CVE-2016-8100/): Intel Integrated Performance Primitives (aka IPP) Cryptography before 9.0.4 makes it easier for local users to discover RSA private keys via (medium 5.5)
- [CVE-2016-8032](https://insights.sbomify.com/CVE-2016-8032/): Security feature bypass in Anti-Virus Engine (AVE) (high 7.3)
- [CVE-2016-8031](https://insights.sbomify.com/CVE-2016-8031/): Security feature bypass in Anti-Virus Engine (AVE) (high 7.3)
- [CVE-2016-8030](https://insights.sbomify.com/CVE-2016-8030/): Memory corruption in VirusScan Enterprise (medium 4.3)
- [CVE-2016-8027](https://insights.sbomify.com/CVE-2016-8027/): SQL injection in McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier (critical 10.0)
- [CVE-2016-8026](https://insights.sbomify.com/CVE-2016-8026/): Privilege escalation in McAfee Security Scan Plus (SSP) (high 7.8)
- [CVE-2016-8025](https://insights.sbomify.com/CVE-2016-8025/): SQL injection in VirusScan Enterprise Linux (VSEL) (medium 6.2)
- [CVE-2016-8024](https://insights.sbomify.com/CVE-2016-8024/): Other in VirusScan Enterprise Linux (VSEL) (high 8.1)
- [CVE-2016-8023](https://insights.sbomify.com/CVE-2016-8023/): Auth bypass in VirusScan Enterprise Linux (VSEL) (high 8.1)
- [CVE-2016-8022](https://insights.sbomify.com/CVE-2016-8022/): Auth bypass in VirusScan Enterprise Linux (VSEL) (high 7.5)
- [CVE-2016-8021](https://insights.sbomify.com/CVE-2016-8021/): Security feature bypass in VirusScan Enterprise Linux (VSEL) (medium 5.0)
- [CVE-2016-8020](https://insights.sbomify.com/CVE-2016-8020/): Code injection in VirusScan Enterprise Linux (VSEL) (high 8.0)
- [CVE-2016-8019](https://insights.sbomify.com/CVE-2016-8019/): Cross-site scripting in VirusScan Enterprise Linux (VSEL) (medium 6.1)
- [CVE-2016-8018](https://insights.sbomify.com/CVE-2016-8018/): Cross-site request forgery in VirusScan Enterprise Linux (VSEL) (medium 4.3)
- [CVE-2016-8017](https://insights.sbomify.com/CVE-2016-8017/): Path traversal in VirusScan Enterprise Linux (VSEL) (medium 4.1)
- [CVE-2016-8016](https://insights.sbomify.com/CVE-2016-8016/): Information disclosure in VirusScan Enterprise Linux (VSEL) (low 3.4)
- [CVE-2016-8012](https://insights.sbomify.com/CVE-2016-8012/): Privilege escalation in Data Loss Prevention Endpoint (DLPe) (high 7.8)
- [CVE-2016-8011](https://insights.sbomify.com/CVE-2016-8011/): Cross-site scripting in McAfee Endpoint Security (ENS) Web Control (medium 6.1)
- [CVE-2016-8010](https://insights.sbomify.com/CVE-2016-8010/): Security feature bypass in McAfee Application Control (MAC) (high 7.8)
- [CVE-2016-8009](https://insights.sbomify.com/CVE-2016-8009/): Privilege escalation in McAfee Application Control (MAC) (high 7.8)
- [CVE-2016-8008](https://insights.sbomify.com/CVE-2016-8008/): Privilege escalation in Security Scan Plus (SSP) (high 8.8)
- [CVE-2016-8007](https://insights.sbomify.com/CVE-2016-8007/): Auth bypass in Host Intrusion Prevention Services (HIPS) (medium 6.3)
- [CVE-2016-8006](https://insights.sbomify.com/CVE-2016-8006/): Auth bypass in n/a (medium 4.4)
- [CVE-2016-8005](https://insights.sbomify.com/CVE-2016-8005/): File upload in McAfee Email Gateway (MEG) (medium 6.5)
- [CVE-2016-7999](https://insights.sbomify.com/CVE-2016-7999/): Server-side request forgery in n/a (high 7.4)
- [CVE-2016-7998](https://insights.sbomify.com/CVE-2016-7998/): Code injection in n/a (high 8.8)
- [CVE-2016-7997](https://insights.sbomify.com/CVE-2016-7997/): Null dereference in n/a (high 7.5)
- [CVE-2016-7996](https://insights.sbomify.com/CVE-2016-7996/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7995](https://insights.sbomify.com/CVE-2016-7995/): Denial of service in n/a (medium 6.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/14/