# Vulnerabilities published in 2016


- [CVE-2016-3014](https://insights.sbomify.com/CVE-2016-3014/): Cross-site scripting in ibm:rational collaborative lifecycle management (medium 5.4)
- [CVE-2016-3013](https://insights.sbomify.com/CVE-2016-3013/): Denial of service in WebSphere MQ (medium 6.5)
- [CVE-2016-3012](https://insights.sbomify.com/CVE-2016-3012/): Hardcoded credentials in ibm:api connect (high 7.5)
- [CVE-2016-3010](https://insights.sbomify.com/CVE-2016-3010/): Cross-site scripting in ibm:connections (medium 5.4)
- [CVE-2016-3009](https://insights.sbomify.com/CVE-2016-3009/): Cross-site request forgery in ibm:connections (low 3.5)
- [CVE-2016-3008](https://insights.sbomify.com/CVE-2016-3008/): Cross-site scripting in ibm:connections (medium 5.4)
- [CVE-2016-3007](https://insights.sbomify.com/CVE-2016-3007/): Cross-site request forgery in ibm:connections (high 8.8)
- [CVE-2016-3006](https://insights.sbomify.com/CVE-2016-3006/): Cross-site scripting in ibm:connections (medium 5.4)
- [CVE-2016-3005](https://insights.sbomify.com/CVE-2016-3005/): Cross-site scripting in ibm:connections (medium 5.4)
- [CVE-2016-3004](https://insights.sbomify.com/CVE-2016-3004/): Cross-site request forgery in ibm:connections (medium 4.6)
- [CVE-2016-3003](https://insights.sbomify.com/CVE-2016-3003/): Cross-site scripting in ibm:connections (medium 5.4)
- [CVE-2016-3002](https://insights.sbomify.com/CVE-2016-3002/): Information disclosure in ibm:connections (low 2.1)
- [CVE-2016-3001](https://insights.sbomify.com/CVE-2016-3001/): Cross-site scripting in ibm:connections (medium 5.4)
- [CVE-2016-3000](https://insights.sbomify.com/CVE-2016-3000/): Denial of service in ibm:connections (medium 4.3)
- [CVE-2016-2999](https://insights.sbomify.com/CVE-2016-2999/): Information disclosure in ibm:connections (medium 6.5)
- [CVE-2016-2998](https://insights.sbomify.com/CVE-2016-2998/): Cross-site request forgery in ibm:connections (low 3.5)
- [CVE-2016-2997](https://insights.sbomify.com/CVE-2016-2997/): Cross-site scripting in ibm:connections (medium 5.4)
- [CVE-2016-2996](https://insights.sbomify.com/CVE-2016-2996/): Other in ibm:security privileged identity manager (medium 6.5)
- [CVE-2016-2995](https://insights.sbomify.com/CVE-2016-2995/): Cross-site scripting in ibm:connections (medium 5.4)
- [CVE-2016-2994](https://insights.sbomify.com/CVE-2016-2994/): Cross-site scripting in ibm:urbancode deploy (medium 5.4)
- [CVE-2016-2992](https://insights.sbomify.com/CVE-2016-2992/): Cross-site scripting in BigInsights (medium 5.4)
- [CVE-2016-2991](https://insights.sbomify.com/CVE-2016-2991/): Cross-site scripting in ibm:lotus protector for mail security (medium 5.4)
- [CVE-2016-2989](https://insights.sbomify.com/CVE-2016-2989/): Open redirect in ibm:connections portlets (medium 6.5)
- [CVE-2016-2988](https://insights.sbomify.com/CVE-2016-2988/): Auth bypass in ibm:tivoli storage manager for virtual environments (high 8.5)
- [CVE-2016-2987](https://insights.sbomify.com/CVE-2016-2987/): Information disclosure in Rational Collaborative Lifecycle Management (medium 4.3)
- [CVE-2016-2986](https://insights.sbomify.com/CVE-2016-2986/): Cross-site scripting in ibm:rational doors next generation (medium 5.4)
- [CVE-2016-2985](https://insights.sbomify.com/CVE-2016-2985/): Privilege escalation in ibm:general parallel file system (high 7.0)
- [CVE-2016-2984](https://insights.sbomify.com/CVE-2016-2984/): Privilege escalation in ibm:general parallel file system (high 7.0)
- [CVE-2016-2983](https://insights.sbomify.com/CVE-2016-2983/): Information disclosure in Tealeaf Customer Experience (high 8.1)
- [CVE-2016-2981](https://insights.sbomify.com/CVE-2016-2981/): Information disclosure in Rational Collaborative Lifecycle Management (medium 6.8)
- [CVE-2016-2980](https://insights.sbomify.com/CVE-2016-2980/): Cross-site scripting in Sametime (medium 6.3)
- [CVE-2016-2979](https://insights.sbomify.com/CVE-2016-2979/): Cross-site scripting in Sametime (medium 5.4)
- [CVE-2016-2978](https://insights.sbomify.com/CVE-2016-2978/): Information disclosure in Sametime (low 3.3)
- [CVE-2016-2977](https://insights.sbomify.com/CVE-2016-2977/): Other in Sametime (medium 4.3)
- [CVE-2016-2976](https://insights.sbomify.com/CVE-2016-2976/): Information disclosure in Sametime (medium 4.3)
- [CVE-2016-2975](https://insights.sbomify.com/CVE-2016-2975/): Cross-site scripting in Sametime (medium 5.4)
- [CVE-2016-2974](https://insights.sbomify.com/CVE-2016-2974/): Information disclosure in Sametime (low 3.3)
- [CVE-2016-2973](https://insights.sbomify.com/CVE-2016-2973/): Cross-site scripting in Sametime (medium 5.4)
- [CVE-2016-2972](https://insights.sbomify.com/CVE-2016-2972/): Information disclosure in Sametime (high 7.8)
- [CVE-2016-2971](https://insights.sbomify.com/CVE-2016-2971/): Information disclosure in Sametime (medium 5.3)
- [CVE-2016-2970](https://insights.sbomify.com/CVE-2016-2970/): Information disclosure in Sametime (medium 4.3)
- [CVE-2016-2969](https://insights.sbomify.com/CVE-2016-2969/): Information disclosure in Sametime (medium 4.3)
- [CVE-2016-2968](https://insights.sbomify.com/CVE-2016-2968/): Auth bypass in ibm:security qradar incident forensics (medium 6.5)
- [CVE-2016-2967](https://insights.sbomify.com/CVE-2016-2967/): Cross-site scripting in Sametime (medium 5.4)
- [CVE-2016-2966](https://insights.sbomify.com/CVE-2016-2966/): Information disclosure in Sametime (medium 4.3)
- [CVE-2016-2965](https://insights.sbomify.com/CVE-2016-2965/): Cross-site request forgery in Sametime (medium 6.5)
- [CVE-2016-2964](https://insights.sbomify.com/CVE-2016-2964/): Information disclosure in Sametime (medium 5.3)
- [CVE-2016-2963](https://insights.sbomify.com/CVE-2016-2963/): Cross-site request forgery in ibm:bigfix remote control (high 8.8)
- [CVE-2016-2961](https://insights.sbomify.com/CVE-2016-2961/): Information disclosure in ibm:integration bus (medium 5.3)
- [CVE-2016-2960](https://insights.sbomify.com/CVE-2016-2960/): Denial of service in ibm:websphere application server (low 3.7)
- [CVE-2016-2959](https://insights.sbomify.com/CVE-2016-2959/): Privilege escalation in Sametime (medium 4.3)
- [CVE-2016-2958](https://insights.sbomify.com/CVE-2016-2958/): Information disclosure in ibm:connections (medium 4.3)
- [CVE-2016-2957](https://insights.sbomify.com/CVE-2016-2957/): Information disclosure in ibm:connections (medium 4.3)
- [CVE-2016-2956](https://insights.sbomify.com/CVE-2016-2956/): Cross-site scripting in ibm:connections (medium 5.4)
- [CVE-2016-2955](https://insights.sbomify.com/CVE-2016-2955/): Cross-site scripting in ibm:connections (medium 5.4)
- [CVE-2016-2954](https://insights.sbomify.com/CVE-2016-2954/): Cross-site scripting in ibm:connections (medium 5.4)
- [CVE-2016-2953](https://insights.sbomify.com/CVE-2016-2953/): Weak cryptography in ibm:connections (low 3.7)
- [CVE-2016-2952](https://insights.sbomify.com/CVE-2016-2952/): Misconfiguration in ibm:bigfix remote control (low 3.7)
- [CVE-2016-2951](https://insights.sbomify.com/CVE-2016-2951/): Weak cryptography in ibm:bigfix remote control (low 3.7)
- [CVE-2016-2950](https://insights.sbomify.com/CVE-2016-2950/): SQL injection in ibm:bigfix remote control (medium 6.5)
- [CVE-2016-2949](https://insights.sbomify.com/CVE-2016-2949/): Information disclosure in ibm:bigfix remote control (low 3.3)
- [CVE-2016-2948](https://insights.sbomify.com/CVE-2016-2948/): Hardcoded credentials in ibm:bigfix remote control (high 7.8)
- [CVE-2016-2947](https://insights.sbomify.com/CVE-2016-2947/): Information disclosure in ibm:rational collaborative lifecycle management (low 2.7)
- [CVE-2016-2946](https://insights.sbomify.com/CVE-2016-2946/): Memory corruption in ibm:tivoli monitoring (high 7.8)
- [CVE-2016-2945](https://insights.sbomify.com/CVE-2016-2945/): Privilege escalation in ibm:websphere application server (high 7.5)
- [CVE-2016-2944](https://insights.sbomify.com/CVE-2016-2944/): Auth bypass in ibm:bigfix remote control (critical 9.8)
- [CVE-2016-2943](https://insights.sbomify.com/CVE-2016-2943/): Information disclosure in ibm:bigfix remote control (low 1.9)
- [CVE-2016-2942](https://insights.sbomify.com/CVE-2016-2942/): Code injection in UrbanCode Deploy (high 7.5)
- [CVE-2016-2941](https://insights.sbomify.com/CVE-2016-2941/): Information disclosure in UrbanCode Deploy (medium 5.5)
- [CVE-2016-2940](https://insights.sbomify.com/CVE-2016-2940/): Information disclosure in ibm:bigfix remote control (medium 5.3)
- [CVE-2016-2939](https://insights.sbomify.com/CVE-2016-2939/): Cross-site scripting in Domino (medium 6.1)
- [CVE-2016-2938](https://insights.sbomify.com/CVE-2016-2938/): Cross-site scripting in IBM Domino 8.5.3.5, 8.5.3.6, 9.0.1, 8.5, 9.0, 8.5.1, 8.5.2, 8.5.3, 9.0.1.1, 8.0.2, 8.0, 8.0.1, 8.5.1.5, 8.5.2.4, 9.0.1.2, 8.5.0.1, 9.0.1.3, 8.5.1.4, 9.0.1.4, 9.0.1.5, 8.5.1.1, 9.0.1.6, 9.0.1.7 (medium 6.1)
- [CVE-2016-2937](https://insights.sbomify.com/CVE-2016-2937/): Information disclosure in ibm:bigfix remote control (medium 6.5)
- [CVE-2016-2936](https://insights.sbomify.com/CVE-2016-2936/): Information disclosure in ibm:bigfix remote control (high 7.3)
- [CVE-2016-2935](https://insights.sbomify.com/CVE-2016-2935/): Denial of service in ibm:bigfix remote control (medium 5.3)
- [CVE-2016-2934](https://insights.sbomify.com/CVE-2016-2934/): Cross-site scripting in ibm:bigfix remote control (medium 6.1)
- [CVE-2016-2933](https://insights.sbomify.com/CVE-2016-2933/): Path traversal in ibm:bigfix remote control (medium 6.8)
- [CVE-2016-2932](https://insights.sbomify.com/CVE-2016-2932/): Code injection in ibm:bigfix remote control (medium 5.3)
- [CVE-2016-2931](https://insights.sbomify.com/CVE-2016-2931/): Information disclosure in ibm:bigfix remote control (medium 5.3)
- [CVE-2016-2930](https://insights.sbomify.com/CVE-2016-2930/): Missing authorization in BigFix Remote Control (high 7.5)
- [CVE-2016-2929](https://insights.sbomify.com/CVE-2016-2929/): Weak cryptography in ibm:bigfix remote control (high 8.1)
- [CVE-2016-2928](https://insights.sbomify.com/CVE-2016-2928/): Information disclosure in ibm:bigfix remote control (medium 4.3)
- [CVE-2016-2927](https://insights.sbomify.com/CVE-2016-2927/): Weak cryptography in ibm:bigfix remote control (medium 5.9)
- [CVE-2016-2926](https://insights.sbomify.com/CVE-2016-2926/): Cross-site scripting in ibm:rational collaborative lifecycle management (medium 5.4)
- [CVE-2016-2925](https://insights.sbomify.com/CVE-2016-2925/): Cross-site scripting in ibm:websphere portal (medium 5.4)
- [CVE-2016-2924](https://insights.sbomify.com/CVE-2016-2924/): Cross-site scripting in BigInsights (medium 5.4)
- [CVE-2016-2923](https://insights.sbomify.com/CVE-2016-2923/): Information disclosure in ibm:websphere application server (high 7.5)
- [CVE-2016-2922](https://insights.sbomify.com/CVE-2016-2922/): Security feature bypass in Rational ClearQuest (low 3.7)
- [CVE-2016-2917](https://insights.sbomify.com/CVE-2016-2917/): Information disclosure in ibm:tririga application platform (high 8.8)
- [CVE-2016-2914](https://insights.sbomify.com/CVE-2016-2914/): File upload in ibm:engineering lifecycle optimization - publishing (medium 5.4)
- [CVE-2016-2912](https://insights.sbomify.com/CVE-2016-2912/): Cross-site scripting in ibm:engineering lifecycle optimization - publishing (medium 5.4)
- [CVE-2016-2908](https://insights.sbomify.com/CVE-2016-2908/): XML external entity in Access Manager (critical 9.1)
- [CVE-2016-2901](https://insights.sbomify.com/CVE-2016-2901/): Cross-site request forgery in ibm:web content manager (high 8.8)
- [CVE-2016-2894](https://insights.sbomify.com/CVE-2016-2894/): Information disclosure in ibm:tivoli storage manager (low 2.5)
- [CVE-2016-2889](https://insights.sbomify.com/CVE-2016-2889/): Cross-site request forgery in ibm:jazz reporting service (high 8.8)
- [CVE-2016-2888](https://insights.sbomify.com/CVE-2016-2888/): Cross-site scripting in ibm:jazz reporting service (medium 5.4)
- [CVE-2016-2887](https://insights.sbomify.com/CVE-2016-2887/): Missing authorization in ibm:ims enterprise suite (high 8.1)
- [CVE-2016-2884](https://insights.sbomify.com/CVE-2016-2884/): Cross-site request forgery in ibm:forms experience builder (high 8.0)
- [CVE-2016-2883](https://insights.sbomify.com/CVE-2016-2883/): Cross-site scripting in ibm:tririga application platform (medium 5.4)
- [CVE-2016-2882](https://insights.sbomify.com/CVE-2016-2882/): Information disclosure in ibm:tririga application platform (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/57/