# Vulnerabilities published in 2016


- [CVE-2016-9775](https://insights.sbomify.com/CVE-2016-9775/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-9774](https://insights.sbomify.com/CVE-2016-9774/): Path traversal in n/a (high 7.8)
- [CVE-2016-9773](https://insights.sbomify.com/CVE-2016-9773/): Memory corruption in n/a (medium 5.5)
- [CVE-2016-9772](https://insights.sbomify.com/CVE-2016-9772/): Information disclosure in n/a (medium 5.3)
- [CVE-2016-9757](https://insights.sbomify.com/CVE-2016-9757/): Cross-site scripting in Nexpose (medium 5.4)
- [CVE-2016-9756](https://insights.sbomify.com/CVE-2016-9756/): Information disclosure in n/a (medium 5.5)
- [CVE-2016-9755](https://insights.sbomify.com/CVE-2016-9755/): Integer overflow in n/a (high 7.8)
- [CVE-2016-9754](https://insights.sbomify.com/CVE-2016-9754/): Integer overflow in n/a (high 7.8)
- [CVE-2016-9752](https://insights.sbomify.com/CVE-2016-9752/): Server-side request forgery in n/a (high 8.6)
- [CVE-2016-9751](https://insights.sbomify.com/CVE-2016-9751/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-9750](https://insights.sbomify.com/CVE-2016-9750/): Information disclosure in QRadar SIEM (medium 6.5)
- [CVE-2016-9749](https://insights.sbomify.com/CVE-2016-9749/): Security feature bypass in Campaign (medium 4.0)
- [CVE-2016-9748](https://insights.sbomify.com/CVE-2016-9748/): Information disclosure in Rational DOORS Next Generation (medium 4.3)
- [CVE-2016-9747](https://insights.sbomify.com/CVE-2016-9747/): Cross-site scripting in Rational Engineering Lifecycle Manager (medium 5.4)
- [CVE-2016-9746](https://insights.sbomify.com/CVE-2016-9746/): Cross-site scripting in Rational Team Concert (medium 5.4)
- [CVE-2016-9740](https://insights.sbomify.com/CVE-2016-9740/): Denial of service in QRadar SIEM (high 7.5)
- [CVE-2016-9739](https://insights.sbomify.com/CVE-2016-9739/): Information disclosure in Identity Manager (high 7.8)
- [CVE-2016-9738](https://insights.sbomify.com/CVE-2016-9738/): Weak cryptography in Security QRadar SIEM (high 7.5)
- [CVE-2016-9737](https://insights.sbomify.com/CVE-2016-9737/): Cross-site scripting in TRIRIGA Application Platform (medium 5.4)
- [CVE-2016-9736](https://insights.sbomify.com/CVE-2016-9736/): Information disclosure in WebSphere Application Server (medium 5.3)
- [CVE-2016-9735](https://insights.sbomify.com/CVE-2016-9735/): Information disclosure in Rational Collaborative Lifecycle Management (medium 4.3)
- [CVE-2016-9733](https://insights.sbomify.com/CVE-2016-9733/): Cross-site scripting in Rational Team Concert (medium 5.4)
- [CVE-2016-9732](https://insights.sbomify.com/CVE-2016-9732/): Cross-site scripting in Cram Social Program Management (medium 5.4)
- [CVE-2016-9731](https://insights.sbomify.com/CVE-2016-9731/): Cross-site scripting in Business Process Manager Advanced (medium 5.4)
- [CVE-2016-9730](https://insights.sbomify.com/CVE-2016-9730/): Cross-site request forgery in QRadar SIEM (medium 4.3)
- [CVE-2016-9729](https://insights.sbomify.com/CVE-2016-9729/): Auth bypass in QRadar SIEM (medium 6.5)
- [CVE-2016-9728](https://insights.sbomify.com/CVE-2016-9728/): SQL injection in QRadar SIEM (high 7.5)
- [CVE-2016-9727](https://insights.sbomify.com/CVE-2016-9727/): Command injection in QRadar SIEM (high 8.5)
- [CVE-2016-9726](https://insights.sbomify.com/CVE-2016-9726/): Command injection in IBM Security QRadar SIEM 7.1 MR1, 7.1, 7.0, 7.2, 7.1 MR2, 7, 7.1 MR2, 7.2.3 (high 8.8)
- [CVE-2016-9725](https://insights.sbomify.com/CVE-2016-9725/): Information disclosure in QRadar SIEM (medium 5.3)
- [CVE-2016-9724](https://insights.sbomify.com/CVE-2016-9724/): XML external entity in QRadar SIEM (high 8.1)
- [CVE-2016-9723](https://insights.sbomify.com/CVE-2016-9723/): Cross-site scripting in QRadar SIEM (medium 6.1)
- [CVE-2016-9722](https://insights.sbomify.com/CVE-2016-9722/): Missing authorization in Security QRadar SIEM (medium 4.2)
- [CVE-2016-9720](https://insights.sbomify.com/CVE-2016-9720/): Information disclosure in QRadar SIEM (medium 5.3)
- [CVE-2016-9719](https://insights.sbomify.com/CVE-2016-9719/): Other in InfoSphere Master Data Management (medium 5.7)
- [CVE-2016-9718](https://insights.sbomify.com/CVE-2016-9718/): Cross-site scripting in InfoSphere Master Data Management (medium 5.4)
- [CVE-2016-9717](https://insights.sbomify.com/CVE-2016-9717/): Other in InfoSphere Master Data Management (medium 6.5)
- [CVE-2016-9716](https://insights.sbomify.com/CVE-2016-9716/): Cross-site request forgery in InfoSphere Master Data Management (high 8.8)
- [CVE-2016-9715](https://insights.sbomify.com/CVE-2016-9715/): Cross-site scripting in InfoSphere Master Data Management (medium 5.4)
- [CVE-2016-9714](https://insights.sbomify.com/CVE-2016-9714/): Cross-site request forgery in InfoSphere Master Data Management (high 8.8)
- [CVE-2016-9711](https://insights.sbomify.com/CVE-2016-9711/): Information disclosure in Cognos Analytics (medium 5.3)
- [CVE-2016-9710](https://insights.sbomify.com/CVE-2016-9710/): Path traversal in Cognos Business Intelligence (medium 5.3)
- [CVE-2016-9707](https://insights.sbomify.com/CVE-2016-9707/): XML external entity in Rational Collaborative Lifecycle Management (high 8.1)
- [CVE-2016-9706](https://insights.sbomify.com/CVE-2016-9706/): XML external entity in Integration Bus (critical 9.1)
- [CVE-2016-9704](https://insights.sbomify.com/CVE-2016-9704/): Cross-site scripting in Identity Manager (medium 6.1)
- [CVE-2016-9703](https://insights.sbomify.com/CVE-2016-9703/): Information disclosure in Identity Manager (low 2.4)
- [CVE-2016-9701](https://insights.sbomify.com/CVE-2016-9701/): Cross-site scripting in Rational Team Concert (medium 5.4)
- [CVE-2016-9700](https://insights.sbomify.com/CVE-2016-9700/): Information disclosure in Rational Collaborative Lifecycle Management (medium 4.3)
- [CVE-2016-9698](https://insights.sbomify.com/CVE-2016-9698/): XML external entity in Rational Rhapsody Design Manager (high 8.1)
- [CVE-2016-9697](https://insights.sbomify.com/CVE-2016-9697/): Information disclosure in Rational Rhapsody Design Manager (low 3.1)
- [CVE-2016-9696](https://insights.sbomify.com/CVE-2016-9696/): Cross-site scripting in Rational Rhapsody Design Manager (medium 5.4)
- [CVE-2016-9694](https://insights.sbomify.com/CVE-2016-9694/): Cross-site scripting in Rational Rhapsody Design Manager (medium 5.4)
- [CVE-2016-9693](https://insights.sbomify.com/CVE-2016-9693/): File upload in Business Process Manager Advanced (medium 6.1)
- [CVE-2016-9692](https://insights.sbomify.com/CVE-2016-9692/): Server-side request forgery in WebSphere Cast Iron Cloud integration (high 8.6)
- [CVE-2016-9691](https://insights.sbomify.com/CVE-2016-9691/): XML external entity in WebSphere Cast Iron Cloud integration (high 8.6)
- [CVE-2016-9686](https://insights.sbomify.com/CVE-2016-9686/): Denial of service in Puppet Enterprise (medium 5.3)
- [CVE-2016-9685](https://insights.sbomify.com/CVE-2016-9685/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9684](https://insights.sbomify.com/CVE-2016-9684/): Command injection in n/a (critical 9.8)
- [CVE-2016-9683](https://insights.sbomify.com/CVE-2016-9683/): Command injection in n/a (critical 9.8)
- [CVE-2016-9682](https://insights.sbomify.com/CVE-2016-9682/): Command injection in n/a (critical 9.8)
- [CVE-2016-9681](https://insights.sbomify.com/CVE-2016-9681/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2016-9680](https://insights.sbomify.com/CVE-2016-9680/): Information disclosure in n/a (high 7.5)
- [CVE-2016-9679](https://insights.sbomify.com/CVE-2016-9679/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-9678](https://insights.sbomify.com/CVE-2016-9678/): Use after free in n/a (critical 9.8)
- [CVE-2016-9677](https://insights.sbomify.com/CVE-2016-9677/): Information disclosure in n/a (medium 5.3)
- [CVE-2016-9676](https://insights.sbomify.com/CVE-2016-9676/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-9675](https://insights.sbomify.com/CVE-2016-9675/): Memory corruption in n/a (high 7.8)
- [CVE-2016-9652](https://insights.sbomify.com/CVE-2016-9652/): Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75. (critical 9.8)
- [CVE-2016-9651](https://insights.sbomify.com/CVE-2016-9651/): Code injection in Chrome (high 8.8)
- [CVE-2016-9650](https://insights.sbomify.com/CVE-2016-9650/): Security feature bypass in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android (medium 4.3)
- [CVE-2016-9646](https://insights.sbomify.com/CVE-2016-9646/): Commit metadata forgery via CGI::FormBuilder context-dependent APIs (medium 5.3)
- [CVE-2016-9645](https://insights.sbomify.com/CVE-2016-9645/): Editing restriction bypass for git revert (medium 6.5)
- [CVE-2016-9644](https://insights.sbomify.com/CVE-2016-9644/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-9643](https://insights.sbomify.com/CVE-2016-9643/): Denial of service in n/a (high 7.5)
- [CVE-2016-9642](https://insights.sbomify.com/CVE-2016-9642/): Memory corruption in n/a (medium 5.5)
- [CVE-2016-9639](https://insights.sbomify.com/CVE-2016-9639/): Salt allows deleted minions to read or write to minions with the same id (critical 9.1)
- [CVE-2016-9638](https://insights.sbomify.com/CVE-2016-9638/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-9637](https://insights.sbomify.com/CVE-2016-9637/): Privilege escalation in n/a (high 7.5)
- [CVE-2016-9636](https://insights.sbomify.com/CVE-2016-9636/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-9635](https://insights.sbomify.com/CVE-2016-9635/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-9634](https://insights.sbomify.com/CVE-2016-9634/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-9633](https://insights.sbomify.com/CVE-2016-9633/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9632](https://insights.sbomify.com/CVE-2016-9632/): Memory corruption in n/a (medium 6.5)
- [CVE-2016-9631](https://insights.sbomify.com/CVE-2016-9631/): Null dereference in n/a (medium 6.5)
- [CVE-2016-9630](https://insights.sbomify.com/CVE-2016-9630/): Memory corruption in n/a (medium 6.5)
- [CVE-2016-9629](https://insights.sbomify.com/CVE-2016-9629/): Null dereference in n/a (medium 6.5)
- [CVE-2016-9628](https://insights.sbomify.com/CVE-2016-9628/): Null dereference in n/a (medium 6.5)
- [CVE-2016-9627](https://insights.sbomify.com/CVE-2016-9627/): Memory corruption in n/a (medium 6.5)
- [CVE-2016-9626](https://insights.sbomify.com/CVE-2016-9626/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9625](https://insights.sbomify.com/CVE-2016-9625/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9624](https://insights.sbomify.com/CVE-2016-9624/): Null dereference in n/a (medium 6.5)
- [CVE-2016-9623](https://insights.sbomify.com/CVE-2016-9623/): Null dereference in n/a (medium 6.5)
- [CVE-2016-9622](https://insights.sbomify.com/CVE-2016-9622/): Null dereference in n/a (medium 6.5)
- [CVE-2016-9606](https://insights.sbomify.com/CVE-2016-9606/): JBoss RESTEasy vulnerable to Improper Input Validation (high 8.1)
- [CVE-2016-9605](https://insights.sbomify.com/CVE-2016-9605/): Cobbler Arbitrary File Read (medium 6.1)
- [CVE-2016-9604](https://insights.sbomify.com/CVE-2016-9604/): Privilege escalation in security (medium 4.4)
- [CVE-2016-9603](https://insights.sbomify.com/CVE-2016-9603/): Memory corruption in Qemu: (medium 5.5)
- [CVE-2016-9602](https://insights.sbomify.com/CVE-2016-9602/): Path traversal in Qemu (high 7.6)
- [CVE-2016-9601](https://insights.sbomify.com/CVE-2016-9601/): Memory corruption in ghostscript (medium 5.3)
- [CVE-2016-9600](https://insights.sbomify.com/CVE-2016-9600/): Null dereference in jasper (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/3/