# Vulnerabilities published in 2016 - [CVE-2016-6077](https://insights.sbomify.com/CVE-2016-6077/): Command injection in Cognos Disclosure Management (medium 5.3) - [CVE-2016-6072](https://insights.sbomify.com/CVE-2016-6072/): Cross-site scripting in Maximo Asset Management (medium 5.4) - [CVE-2016-6068](https://insights.sbomify.com/CVE-2016-6068/): Information disclosure in UrbanCode Deploy (high 7.5) - [CVE-2016-6065](https://insights.sbomify.com/CVE-2016-6065/): Command injection in Guardium (high 7.8) - [CVE-2016-6062](https://insights.sbomify.com/CVE-2016-6062/): Cross-site scripting in Resilient (medium 6.1) - [CVE-2016-6061](https://insights.sbomify.com/CVE-2016-6061/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2016-6060](https://insights.sbomify.com/CVE-2016-6060/): Information disclosure in Rational DOORS Next Generation (medium 4.3) - [CVE-2016-6059](https://insights.sbomify.com/CVE-2016-6059/): XML external entity in InfoSphere Information Server (high 8.1) - [CVE-2016-6056](https://insights.sbomify.com/CVE-2016-6056/): Cross-site scripting in Call Center for Commerce (medium 5.4) - [CVE-2016-6055](https://insights.sbomify.com/CVE-2016-6055/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4) - [CVE-2016-6054](https://insights.sbomify.com/CVE-2016-6054/): Cross-site scripting in Jazz Reporting Service (medium 5.4) - [CVE-2016-6047](https://insights.sbomify.com/CVE-2016-6047/): Cross-site scripting in Jazz Reporting Service (medium 5.4) - [CVE-2016-6046](https://insights.sbomify.com/CVE-2016-6046/): Cross-site scripting in Tivoli Storage Manager Extended Edition (medium 5.4) - [CVE-2016-6045](https://insights.sbomify.com/CVE-2016-6045/): Cross-site request forgery in Tivoli Storage Manager Extended Edition (high 8.8) - [CVE-2016-6044](https://insights.sbomify.com/CVE-2016-6044/): Missing authorization in Tivoli Storage Manager Extended Edition (medium 4.3) - [CVE-2016-6043](https://insights.sbomify.com/CVE-2016-6043/): Auth bypass in Tivoli Storage Manager Extended Edition (high 7.0) - [CVE-2016-6042](https://insights.sbomify.com/CVE-2016-6042/): Memory corruption in AppScan Enterprise (high 7.3) - [CVE-2016-6040](https://insights.sbomify.com/CVE-2016-6040/): Auth bypass in Rational Collaborative Lifecycle Management (medium 5.0) - [CVE-2016-6039](https://insights.sbomify.com/CVE-2016-6039/): Cross-site scripting in Jazz Reporting Service (medium 5.4) - [CVE-2016-6038](https://insights.sbomify.com/CVE-2016-6038/): Path traversal in n/a (medium 6.5) - [CVE-2016-6037](https://insights.sbomify.com/CVE-2016-6037/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 4.8) - [CVE-2016-6036](https://insights.sbomify.com/CVE-2016-6036/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2016-6035](https://insights.sbomify.com/CVE-2016-6035/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2016-6034](https://insights.sbomify.com/CVE-2016-6034/): Information disclosure in Tivoli Storage Manager for Virtual Environments (medium 6.8) - [CVE-2016-6033](https://insights.sbomify.com/CVE-2016-6033/): Cross-site request forgery in Tivoli Storage Manager for Virtual Environments (high 8.8) - [CVE-2016-6032](https://insights.sbomify.com/CVE-2016-6032/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2016-6031](https://insights.sbomify.com/CVE-2016-6031/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2016-6030](https://insights.sbomify.com/CVE-2016-6030/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2016-6029](https://insights.sbomify.com/CVE-2016-6029/): Information disclosure in Emptoris Strategic Supply Management (medium 5.9) - [CVE-2016-6028](https://insights.sbomify.com/CVE-2016-6028/): Information disclosure in Rational Collaborative Lifecycle Management (medium 4.3) - [CVE-2016-6027](https://insights.sbomify.com/CVE-2016-6027/): Security feature bypass in n/a (medium 6.1) - [CVE-2016-6026](https://insights.sbomify.com/CVE-2016-6026/): Information disclosure in n/a (medium 5.3) - [CVE-2016-6025](https://insights.sbomify.com/CVE-2016-6025/): Auth bypass in n/a (medium 5.9) - [CVE-2016-6024](https://insights.sbomify.com/CVE-2016-6024/): Information disclosure in Rational Collaborative Lifecycle Management (medium 4.3) - [CVE-2016-6023](https://insights.sbomify.com/CVE-2016-6023/): Path traversal in n/a (high 7.5) - [CVE-2016-6022](https://insights.sbomify.com/CVE-2016-6022/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2016-6021](https://insights.sbomify.com/CVE-2016-6021/): Cross-site scripting in Emptoris Strategic Supply Management (medium 5.4) - [CVE-2016-6020](https://insights.sbomify.com/CVE-2016-6020/): Open redirect in Sterling B2B Integrator (medium 6.1) - [CVE-2016-6019](https://insights.sbomify.com/CVE-2016-6019/): Cross-site scripting in Emptoris Strategic Supply Management (medium 5.4) - [CVE-2016-6018](https://insights.sbomify.com/CVE-2016-6018/): Information disclosure in Emptoris Contract Management (medium 4.3) - [CVE-2016-6001](https://insights.sbomify.com/CVE-2016-6001/): Server-side request forgery in Forms Experience Builder (low 3.1) - [CVE-2016-6000](https://insights.sbomify.com/CVE-2016-6000/): Cross-site scripting in TRIRIGA Application Platform (medium 6.1) - [CVE-2016-5997](https://insights.sbomify.com/CVE-2016-5997/): Weak cryptography in n/a (medium 6.5) - [CVE-2016-5996](https://insights.sbomify.com/CVE-2016-5996/): Weak cryptography in n/a (high 7.5) - [CVE-2016-5995](https://insights.sbomify.com/CVE-2016-5995/): Privilege escalation in n/a (high 7.3) - [CVE-2016-5994](https://insights.sbomify.com/CVE-2016-5994/): Path traversal in InfoSphere Information Server (medium 6.5) - [CVE-2016-5992](https://insights.sbomify.com/CVE-2016-5992/): Denial of service in n/a (low 2.5) - [CVE-2016-5991](https://insights.sbomify.com/CVE-2016-5991/): Privilege escalation in n/a (medium 4.5) - [CVE-2016-5990](https://insights.sbomify.com/CVE-2016-5990/): File upload in Privileged Identity Manager (medium 6.3) - [CVE-2016-5988](https://insights.sbomify.com/CVE-2016-5988/): Information disclosure in Privileged Identity Manager (medium 6.5) - [CVE-2016-5987](https://insights.sbomify.com/CVE-2016-5987/): Information disclosure in n/a (medium 5.3) - [CVE-2016-5986](https://insights.sbomify.com/CVE-2016-5986/): Information disclosure in n/a (high 7.5) - [CVE-2016-5985](https://insights.sbomify.com/CVE-2016-5985/): Memory corruption in Tivoli Storage Manager (high 7.8) - [CVE-2016-5984](https://insights.sbomify.com/CVE-2016-5984/): Cross-site scripting in InfoSphere Information Server (medium 6.1) - [CVE-2016-5983](https://insights.sbomify.com/CVE-2016-5983/): Deserialization in n/a (high 7.5) - [CVE-2016-5981](https://insights.sbomify.com/CVE-2016-5981/): Cross-site scripting in n/a (medium 5.4) - [CVE-2016-5980](https://insights.sbomify.com/CVE-2016-5980/): Cross-site scripting in TRIRIGA Application Platform (medium 5.4) - [CVE-2016-5979](https://insights.sbomify.com/CVE-2016-5979/): Business logic in Distributed Marketing (low 2.7) - [CVE-2016-5978](https://insights.sbomify.com/CVE-2016-5978/): Cross-site scripting in n/a (medium 5.4) - [CVE-2016-5977](https://insights.sbomify.com/CVE-2016-5977/): Open redirect in n/a (medium 6.8) - [CVE-2016-5976](https://insights.sbomify.com/CVE-2016-5976/): Information disclosure in n/a (medium 4.9) - [CVE-2016-5975](https://insights.sbomify.com/CVE-2016-5975/): Cross-site scripting in n/a (medium 5.4) - [CVE-2016-5974](https://insights.sbomify.com/CVE-2016-5974/): Cross-site scripting in n/a (medium 5.4) - [CVE-2016-5972](https://insights.sbomify.com/CVE-2016-5972/): Missing authorization in n/a (medium 6.8) - [CVE-2016-5971](https://insights.sbomify.com/CVE-2016-5971/): XML external entity in n/a (high 7.1) - [CVE-2016-5970](https://insights.sbomify.com/CVE-2016-5970/): Path traversal in n/a (medium 6.5) - [CVE-2016-5968](https://insights.sbomify.com/CVE-2016-5968/): Server-side request forgery in n/a (medium 5.3) - [CVE-2016-5967](https://insights.sbomify.com/CVE-2016-5967/): Information disclosure in n/a (medium 5.5) - [CVE-2016-5966](https://insights.sbomify.com/CVE-2016-5966/): Information disclosure in Privileged Identity Manager (medium 5.9) - [CVE-2016-5964](https://insights.sbomify.com/CVE-2016-5964/): Security feature bypass in Privileged Identity Manager (critical 9.8) - [CVE-2016-5963](https://insights.sbomify.com/CVE-2016-5963/): Code injection in n/a (high 8.8) - [CVE-2016-5960](https://insights.sbomify.com/CVE-2016-5960/): Information disclosure in Security Privileged Identity Manager (medium 5.5) - [CVE-2016-5959](https://insights.sbomify.com/CVE-2016-5959/): Information disclosure in Security Privileged Identity Manager (medium 5.3) - [CVE-2016-5958](https://insights.sbomify.com/CVE-2016-5958/): Information disclosure in Privileged Identity Manager (high 7.5) - [CVE-2016-5957](https://insights.sbomify.com/CVE-2016-5957/): Weak cryptography in n/a (high 7.5) - [CVE-2016-5955](https://insights.sbomify.com/CVE-2016-5955/): Cross-site scripting in n/a (medium 5.4) - [CVE-2016-5954](https://insights.sbomify.com/CVE-2016-5954/): Denial of service in n/a (medium 6.5) - [CVE-2016-5953](https://insights.sbomify.com/CVE-2016-5953/): Information disclosure in Sterling Order Management (low 3.7) - [CVE-2016-5952](https://insights.sbomify.com/CVE-2016-5952/): SQL injection in Kenexa LCMS Premier on Cloud (high 8.8) - [CVE-2016-5951](https://insights.sbomify.com/CVE-2016-5951/): Cross-site scripting in Kenexa LCMS Premier on Cloud (medium 5.4) - [CVE-2016-5950](https://insights.sbomify.com/CVE-2016-5950/): Information disclosure in Kenexa LCMS Premier on Cloud (medium 6.5) - [CVE-2016-5949](https://insights.sbomify.com/CVE-2016-5949/): Information disclosure in Kenexa LCMS Premier on Cloud (medium 4.3) - [CVE-2016-5948](https://insights.sbomify.com/CVE-2016-5948/): Cross-site scripting in Kenexa LCMS Premier on Cloud (medium 5.4) - [CVE-2016-5947](https://insights.sbomify.com/CVE-2016-5947/): Cross-site request forgery in n/a (medium 5.7) - [CVE-2016-5946](https://insights.sbomify.com/CVE-2016-5946/): Path traversal in n/a (medium 6.5) - [CVE-2016-5945](https://insights.sbomify.com/CVE-2016-5945/): File upload in n/a (medium 4.3) - [CVE-2016-5944](https://insights.sbomify.com/CVE-2016-5944/): Cross-site scripting in n/a (medium 5.4) - [CVE-2016-5943](https://insights.sbomify.com/CVE-2016-5943/): Missing authorization in n/a (medium 5.4) - [CVE-2016-5942](https://insights.sbomify.com/CVE-2016-5942/): Cross-site scripting in Kenexa LMS on Cloud (medium 5.4) - [CVE-2016-5941](https://insights.sbomify.com/CVE-2016-5941/): Path traversal in Kenexa LMS on Cloud (medium 5.7) - [CVE-2016-5940](https://insights.sbomify.com/CVE-2016-5940/): Cross-site scripting in Kenexa LMS on Cloud (medium 5.4) - [CVE-2016-5939](https://insights.sbomify.com/CVE-2016-5939/): SQL injection in Kenexa LMS on Cloud (medium 6.3) - [CVE-2016-5938](https://insights.sbomify.com/CVE-2016-5938/): Information disclosure in Kenexa LMS on Cloud (low 3.3) - [CVE-2016-5937](https://insights.sbomify.com/CVE-2016-5937/): Cross-site request forgery in Kenexa LCMS Premier on Cloud (high 8.8) - [CVE-2016-5935](https://insights.sbomify.com/CVE-2016-5935/): Information disclosure in Tivoli Components (medium 5.9) - [CVE-2016-5934](https://insights.sbomify.com/CVE-2016-5934/): Code injection in Tivoli Storage Manager FastBack (high 7.3) - [CVE-2016-5933](https://insights.sbomify.com/CVE-2016-5933/): Other in Tivoli Monitoring V6 (medium 4.6) - [CVE-2016-5932](https://insights.sbomify.com/CVE-2016-5932/): Cross-site scripting in Connections (medium 5.4) - [CVE-2016-5927](https://insights.sbomify.com/CVE-2016-5927/): Information disclosure in n/a (medium 5.5) - [CVE-2016-5920](https://insights.sbomify.com/CVE-2016-5920/): Cross-site scripting in n/a (medium 5.4) --- From sbomify Insights: https://insights.sbomify.com/years/2016/page/30/