# Vulnerabilities published in 2016


- [CVE-2016-0445](https://insights.sbomify.com/CVE-2016-0445/): Other in oracle:enterprise manager grid control (medium 4.6)
- [CVE-2016-0444](https://insights.sbomify.com/CVE-2016-0444/): Other in oracle:enterprise manager grid control (medium 4.4)
- [CVE-2016-0443](https://insights.sbomify.com/CVE-2016-0443/): Other in oracle:enterprise manager grid control (medium 4.3)
- [CVE-2016-0442](https://insights.sbomify.com/CVE-2016-0442/): Other in oracle:enterprise manager grid control (medium 6.5)
- [CVE-2016-0441](https://insights.sbomify.com/CVE-2016-0441/): Other in oracle:fusion middleware (medium 6.8)
- [CVE-2016-0440](https://insights.sbomify.com/CVE-2016-0440/): Denial of service in oracle:solaris (high 7.8)
- [CVE-2016-0439](https://insights.sbomify.com/CVE-2016-0439/): Other in oracle:fusion middleware (medium 5.0)
- [CVE-2016-0438](https://insights.sbomify.com/CVE-2016-0438/): Other in oracle:retail applications (low 1.9)
- [CVE-2016-0437](https://insights.sbomify.com/CVE-2016-0437/): Other in oracle:retail applications (low 1.9)
- [CVE-2016-0436](https://insights.sbomify.com/CVE-2016-0436/): Other in oracle:retail applications (low 1.9)
- [CVE-2016-0435](https://insights.sbomify.com/CVE-2016-0435/): Other in oracle:retail applications (low 3.3)
- [CVE-2016-0434](https://insights.sbomify.com/CVE-2016-0434/): Other in oracle:retail applications (low 1.9)
- [CVE-2016-0433](https://insights.sbomify.com/CVE-2016-0433/): Other in oracle:fusion middleware (medium 4.3)
- [CVE-2016-0432](https://insights.sbomify.com/CVE-2016-0432/): Denial of service in oracle:fusion middleware (low 1.9)
- [CVE-2016-0431](https://insights.sbomify.com/CVE-2016-0431/): Other in oracle:solaris (low 1.2)
- [CVE-2016-0430](https://insights.sbomify.com/CVE-2016-0430/): Other in oracle:fusion middleware (medium 4.3)
- [CVE-2016-0429](https://insights.sbomify.com/CVE-2016-0429/): Other in oracle:fusion middleware (medium 4.3)
- [CVE-2016-0428](https://insights.sbomify.com/CVE-2016-0428/): Other in oracle:solaris (medium 4.9)
- [CVE-2016-0427](https://insights.sbomify.com/CVE-2016-0427/): Other in oracle:enterprise manager grid control (medium 4.0)
- [CVE-2016-0426](https://insights.sbomify.com/CVE-2016-0426/): Other in oracle:solaris (low 3.6)
- [CVE-2016-0425](https://insights.sbomify.com/CVE-2016-0425/): Other in oracle:jd edwards products (medium 6.0)
- [CVE-2016-0424](https://insights.sbomify.com/CVE-2016-0424/): Other in oracle:jd edwards products (high 7.1)
- [CVE-2016-0423](https://insights.sbomify.com/CVE-2016-0423/): Other in oracle:jd edwards products (high 7.3)
- [CVE-2016-0422](https://insights.sbomify.com/CVE-2016-0422/): Other in oracle:jd edwards products (high 7.1)
- [CVE-2016-0421](https://insights.sbomify.com/CVE-2016-0421/): Other in oracle:jd edwards products (medium 5.0)
- [CVE-2016-0420](https://insights.sbomify.com/CVE-2016-0420/): Other in oracle:jd edwards products (high 7.8)
- [CVE-2016-0419](https://insights.sbomify.com/CVE-2016-0419/): Other in oracle:solaris (medium 4.9)
- [CVE-2016-0418](https://insights.sbomify.com/CVE-2016-0418/): Other in oracle:solaris (medium 6.1)
- [CVE-2016-0417](https://insights.sbomify.com/CVE-2016-0417/): Other in oracle:solaris cluster (medium 4.6)
- [CVE-2016-0416](https://insights.sbomify.com/CVE-2016-0416/): Other in oracle:solaris (medium 5.0)
- [CVE-2016-0415](https://insights.sbomify.com/CVE-2016-0415/): Other in oracle:enterprise manager grid control (medium 6.8)
- [CVE-2016-0414](https://insights.sbomify.com/CVE-2016-0414/): Other in oracle:solaris (high 7.2)
- [CVE-2016-0413](https://insights.sbomify.com/CVE-2016-0413/): Other in oracle:fusion middleware (medium 4.0)
- [CVE-2016-0412](https://insights.sbomify.com/CVE-2016-0412/): Other in oracle:peoplesoft supply chain management eprocurement (low 3.5)
- [CVE-2016-0411](https://insights.sbomify.com/CVE-2016-0411/): Other in oracle:enterprise manager grid control (medium 4.6)
- [CVE-2016-0409](https://insights.sbomify.com/CVE-2016-0409/): Other in oracle:peoplesoft products (medium 4.0)
- [CVE-2016-0408](https://insights.sbomify.com/CVE-2016-0408/): Other in oracle:peoplesoft enterprise peopletools (medium 5.4)
- [CVE-2016-0407](https://insights.sbomify.com/CVE-2016-0407/): Other in oracle:peoplesoft enterprise human capital management human resources (medium 6.5)
- [CVE-2016-0406](https://insights.sbomify.com/CVE-2016-0406/): Other in oracle:solaris (low 3.3)
- [CVE-2016-0405](https://insights.sbomify.com/CVE-2016-0405/): Other in oracle:oracle and sun systems product suite (low 1.7)
- [CVE-2016-0404](https://insights.sbomify.com/CVE-2016-0404/): Other in oracle:fusion middleware (medium 4.3)
- [CVE-2016-0403](https://insights.sbomify.com/CVE-2016-0403/): Denial of service in oracle:solaris (high 7.8)
- [CVE-2016-0402](https://insights.sbomify.com/CVE-2016-0402/): Other in canonical:ubuntu linux (medium 5.0)
- [CVE-2016-0401](https://insights.sbomify.com/CVE-2016-0401/): Other in oracle:fusion middleware (medium 4.3)
- [CVE-2016-0400](https://insights.sbomify.com/CVE-2016-0400/): Other in ibm:websphere extreme scale (medium 6.1)
- [CVE-2016-0399](https://insights.sbomify.com/CVE-2016-0399/): Cross-site scripting in ibm:maximo asset management (medium 5.4)
- [CVE-2016-0398](https://insights.sbomify.com/CVE-2016-0398/): Other in ibm:cognos analytics (medium 4.3)
- [CVE-2016-0397](https://insights.sbomify.com/CVE-2016-0397/): Information disclosure in ibm:bigfix webreports (medium 5.9)
- [CVE-2016-0396](https://insights.sbomify.com/CVE-2016-0396/): Command injection in BigFix Platform (high 8.1)
- [CVE-2016-0394](https://insights.sbomify.com/CVE-2016-0394/): Misconfiguration in Integration Bus (low 3.3)
- [CVE-2016-0393](https://insights.sbomify.com/CVE-2016-0393/): Information disclosure in ibm:maximo asset management (medium 5.3)
- [CVE-2016-0392](https://insights.sbomify.com/CVE-2016-0392/): Privilege escalation in ibm:elastic storage server (high 8.4)
- [CVE-2016-0391](https://insights.sbomify.com/CVE-2016-0391/): Weak cryptography in ibm:watson developer cloud (critical 9.8)
- [CVE-2016-0390](https://insights.sbomify.com/CVE-2016-0390/): Cross-site scripting in ibm:algo one (medium 5.4)
- [CVE-2016-0389](https://insights.sbomify.com/CVE-2016-0389/): Information disclosure in ibm:websphere application server (medium 5.3)
- [CVE-2016-0387](https://insights.sbomify.com/CVE-2016-0387/): Cross-site scripting in ibm:tririga application platform (medium 5.4)
- [CVE-2016-0386](https://insights.sbomify.com/CVE-2016-0386/): Cross-site request forgery in ibm:tririga application platform (high 8.0)
- [CVE-2016-0385](https://insights.sbomify.com/CVE-2016-0385/): Memory corruption in ibm:websphere application server (low 3.1)
- [CVE-2016-0382](https://insights.sbomify.com/CVE-2016-0382/): Information disclosure in Tealeaf Customer Experience (medium 4.0)
- [CVE-2016-0381](https://insights.sbomify.com/CVE-2016-0381/): Denial of service in ibm:cognos tm1 (medium 4.3)
- [CVE-2016-0380](https://insights.sbomify.com/CVE-2016-0380/): Misconfiguration in ibm:sterling connect\ (low 3.3)
- [CVE-2016-0379](https://insights.sbomify.com/CVE-2016-0379/): Denial of service in ibm:websphere mq (low 3.1)
- [CVE-2016-0378](https://insights.sbomify.com/CVE-2016-0378/): Information disclosure in ibm:websphere application server (low 3.7)
- [CVE-2016-0377](https://insights.sbomify.com/CVE-2016-0377/): Information disclosure in ibm:websphere application server (medium 4.3)
- [CVE-2016-0376](https://insights.sbomify.com/CVE-2016-0376/): Deserialization in ibm:java sdk (high 8.1)
- [CVE-2016-0375](https://insights.sbomify.com/CVE-2016-0375/): Privilege escalation in ibm:messagesight (high 8.8)
- [CVE-2016-0374](https://insights.sbomify.com/CVE-2016-0374/): Privilege escalation in ibm:tririga application platform (high 8.8)
- [CVE-2016-0373](https://insights.sbomify.com/CVE-2016-0373/): Missing authorization in UrbanCode Deploy (low 3.1)
- [CVE-2016-0372](https://insights.sbomify.com/CVE-2016-0372/): Information disclosure in ibm:rational collaborative lifecycle management (low 3.7)
- [CVE-2016-0371](https://insights.sbomify.com/CVE-2016-0371/): Information disclosure in Tivoli Storage Manager (medium 5.5)
- [CVE-2016-0370](https://insights.sbomify.com/CVE-2016-0370/): Cross-site scripting in ibm:forms experience builder (low 2.7)
- [CVE-2016-0369](https://insights.sbomify.com/CVE-2016-0369/): XML external entity in ibm:forms experience builder (low 2.7)
- [CVE-2016-0367](https://insights.sbomify.com/CVE-2016-0367/): Information disclosure in ibm:security identity manager virtual appliance (medium 4.3)
- [CVE-2016-0366](https://insights.sbomify.com/CVE-2016-0366/): Weak cryptography in ibm:security privileged identity manager (low 3.7)
- [CVE-2016-0365](https://insights.sbomify.com/CVE-2016-0365/): Auth bypass in ibm:urbancode deploy (medium 5.9)
- [CVE-2016-0364](https://insights.sbomify.com/CVE-2016-0364/): Information disclosure in ibm:urbancode deploy (medium 4.3)
- [CVE-2016-0363](https://insights.sbomify.com/CVE-2016-0363/): Security feature bypass in ibm:java sdk (high 8.1)
- [CVE-2016-0362](https://insights.sbomify.com/CVE-2016-0362/): Server-side request forgery in ibm:tririga application platform (high 7.7)
- [CVE-2016-0361](https://insights.sbomify.com/CVE-2016-0361/): Information disclosure in ibm:general parallel file system (medium 6.5)
- [CVE-2016-0360](https://insights.sbomify.com/CVE-2016-0360/): Deserialization in WebSphere MQ (critical 9.8)
- [CVE-2016-0359](https://insights.sbomify.com/CVE-2016-0359/): Other in ibm:websphere application server (medium 6.1)
- [CVE-2016-0358](https://insights.sbomify.com/CVE-2016-0358/): Information disclosure in Sametime (medium 4.3)
- [CVE-2016-0357](https://insights.sbomify.com/CVE-2016-0357/): Other in ibm:security identity manager adapter (medium 4.3)
- [CVE-2016-0356](https://insights.sbomify.com/CVE-2016-0356/): Cross-site request forgery in Sametime (medium 6.5)
- [CVE-2016-0355](https://insights.sbomify.com/CVE-2016-0355/): Cross-site request forgery in Sametime (medium 6.5)
- [CVE-2016-0354](https://insights.sbomify.com/CVE-2016-0354/): File upload in Sametime (medium 5.5)
- [CVE-2016-0353](https://insights.sbomify.com/CVE-2016-0353/): Information disclosure in ibm:security privileged identity manager (low 3.7)
- [CVE-2016-0351](https://insights.sbomify.com/CVE-2016-0351/): Information disclosure in ibm:security identity manager virtual appliance (low 3.7)
- [CVE-2016-0350](https://insights.sbomify.com/CVE-2016-0350/): Cross-site scripting in ibm:jazz reporting service (medium 5.4)
- [CVE-2016-0349](https://insights.sbomify.com/CVE-2016-0349/): Missing authorization in ibm:business process manager (medium 6.5)
- [CVE-2016-0348](https://insights.sbomify.com/CVE-2016-0348/): Cross-site request forgery in ibm:tririga application platform (high 8.0)
- [CVE-2016-0346](https://insights.sbomify.com/CVE-2016-0346/): Cross-site scripting in ibm:cognos business intelligence (medium 5.4)
- [CVE-2016-0345](https://insights.sbomify.com/CVE-2016-0345/): Information disclosure in ibm:tririga application platform (medium 4.3)
- [CVE-2016-0344](https://insights.sbomify.com/CVE-2016-0344/): Cross-site scripting in ibm:tririga application platform (medium 5.4)
- [CVE-2016-0343](https://insights.sbomify.com/CVE-2016-0343/): Information disclosure in ibm:tririga application platform (medium 4.3)
- [CVE-2016-0342](https://insights.sbomify.com/CVE-2016-0342/): Missing authorization in ibm:tririga application platform (medium 5.4)
- [CVE-2016-0341](https://insights.sbomify.com/CVE-2016-0341/): Information disclosure in ibm:b2b advanced communications (high 7.5)
- [CVE-2016-0340](https://insights.sbomify.com/CVE-2016-0340/): Auth bypass in ibm:security identity manager adapter (high 7.4)
- [CVE-2016-0339](https://insights.sbomify.com/CVE-2016-0339/): Auth bypass in ibm:security identity manager adapter (medium 5.6)
- [CVE-2016-0338](https://insights.sbomify.com/CVE-2016-0338/): Information disclosure in ibm:security identity manager adapter (medium 6.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/91/