# Vulnerabilities published in 2016


- [CVE-2016-0336](https://insights.sbomify.com/CVE-2016-0336/): Cross-site scripting in ibm:security identity manager (medium 5.4)
- [CVE-2016-0335](https://insights.sbomify.com/CVE-2016-0335/): Cross-site request forgery in ibm:security identity manager (high 8.8)
- [CVE-2016-0332](https://insights.sbomify.com/CVE-2016-0332/): Auth bypass in ibm:security identity manager virtual appliance (critical 9.8)
- [CVE-2016-0331](https://insights.sbomify.com/CVE-2016-0331/): Cross-site scripting in ibm:rational collaborative lifecycle management (medium 5.4)
- [CVE-2016-0330](https://insights.sbomify.com/CVE-2016-0330/): Weak cryptography in ibm:security identity manager adapter (high 7.3)
- [CVE-2016-0329](https://insights.sbomify.com/CVE-2016-0329/): Open redirect in ibm:emptoris sourcing (medium 5.4)
- [CVE-2016-0328](https://insights.sbomify.com/CVE-2016-0328/): Command injection in ibm:security guardium database activity monitor (high 7.8)
- [CVE-2016-0327](https://insights.sbomify.com/CVE-2016-0327/): Privilege escalation in ibm:security identity manager virtual appliance (high 7.8)
- [CVE-2016-0326](https://insights.sbomify.com/CVE-2016-0326/): Command injection in ibm:rational collaborative lifecycle management (high 8.8)
- [CVE-2016-0325](https://insights.sbomify.com/CVE-2016-0325/): Command injection in ibm:rational team concert (medium 6.3)
- [CVE-2016-0324](https://insights.sbomify.com/CVE-2016-0324/): Command injection in ibm:security identity manager virtual appliance (high 8.8)
- [CVE-2016-0323](https://insights.sbomify.com/CVE-2016-0323/): Security feature bypass in ibm:bluemix (medium 6.5)
- [CVE-2016-0322](https://insights.sbomify.com/CVE-2016-0322/): Cross-site scripting in ibm:connections (medium 5.4)
- [CVE-2016-0321](https://insights.sbomify.com/CVE-2016-0321/): Information disclosure in ibm:personal communications (medium 6.2)
- [CVE-2016-0320](https://insights.sbomify.com/CVE-2016-0320/): Missing authorization in UrbanCode Deploy (medium 4.3)
- [CVE-2016-0319](https://insights.sbomify.com/CVE-2016-0319/): XML external entity in ibm:jazz reporting service (high 7.5)
- [CVE-2016-0318](https://insights.sbomify.com/CVE-2016-0318/): Auth bypass in ibm:jazz reporting service (medium 5.0)
- [CVE-2016-0317](https://insights.sbomify.com/CVE-2016-0317/): Other in ibm:jazz reporting service (medium 6.5)
- [CVE-2016-0316](https://insights.sbomify.com/CVE-2016-0316/): Cross-site scripting in ibm:jazz reporting service (medium 5.4)
- [CVE-2016-0315](https://insights.sbomify.com/CVE-2016-0315/): Auth bypass in ibm:jazz reporting service (high 8.8)
- [CVE-2016-0314](https://insights.sbomify.com/CVE-2016-0314/): Other in ibm:jazz reporting service (medium 6.5)
- [CVE-2016-0313](https://insights.sbomify.com/CVE-2016-0313/): Cross-site scripting in ibm:jazz reporting service (medium 5.4)
- [CVE-2016-0312](https://insights.sbomify.com/CVE-2016-0312/): Information disclosure in ibm:tririga application platform (high 7.5)
- [CVE-2016-0311](https://insights.sbomify.com/CVE-2016-0311/): Cross-site scripting in ibm:tivoli business service manager (medium 5.4)
- [CVE-2016-0310](https://insights.sbomify.com/CVE-2016-0310/): Cross-site scripting in Connections (medium 5.4)
- [CVE-2016-0308](https://insights.sbomify.com/CVE-2016-0308/): Other in Connections (medium 4.3)
- [CVE-2016-0307](https://insights.sbomify.com/CVE-2016-0307/): Information disclosure in Connections (medium 4.3)
- [CVE-2016-0306](https://insights.sbomify.com/CVE-2016-0306/): Misconfiguration in ibm:websphere application server (medium 5.9)
- [CVE-2016-0305](https://insights.sbomify.com/CVE-2016-0305/): Cross-site scripting in Connections (medium 5.4)
- [CVE-2016-0304](https://insights.sbomify.com/CVE-2016-0304/): Auth bypass in ibm:domino (high 8.1)
- [CVE-2016-0303](https://insights.sbomify.com/CVE-2016-0303/): Cross-site scripting in ibm:tivoli integrated portal (medium 5.4)
- [CVE-2016-0301](https://insights.sbomify.com/CVE-2016-0301/): Memory corruption in ibm:domino (high 7.8)
- [CVE-2016-0300](https://insights.sbomify.com/CVE-2016-0300/): Missing authorization in ibm:tririga application platform (medium 5.4)
- [CVE-2016-0299](https://insights.sbomify.com/CVE-2016-0299/): Information disclosure in ibm:tririga application platform (medium 5.3)
- [CVE-2016-0298](https://insights.sbomify.com/CVE-2016-0298/): Path traversal in ibm:security guardium (medium 6.5)
- [CVE-2016-0297](https://insights.sbomify.com/CVE-2016-0297/): Misconfiguration in BigFix Platform (low 3.7)
- [CVE-2016-0296](https://insights.sbomify.com/CVE-2016-0296/): Information disclosure in BigFix Platform (low 3.3)
- [CVE-2016-0295](https://insights.sbomify.com/CVE-2016-0295/): Cross-site request forgery in ibm:bigfix platform (high 8.8)
- [CVE-2016-0293](https://insights.sbomify.com/CVE-2016-0293/): Cross-site scripting in ibm:bigfix platform (medium 6.1)
- [CVE-2016-0292](https://insights.sbomify.com/CVE-2016-0292/): Information disclosure in ibm:bigfix (medium 5.5)
- [CVE-2016-0291](https://insights.sbomify.com/CVE-2016-0291/): Command injection in ibm:bigfix platform (high 8.8)
- [CVE-2016-0289](https://insights.sbomify.com/CVE-2016-0289/): Security feature bypass in ibm:maximo asset management (medium 4.3)
- [CVE-2016-0288](https://insights.sbomify.com/CVE-2016-0288/): XML external entity in ibm:security appscan (medium 6.5)
- [CVE-2016-0287](https://insights.sbomify.com/CVE-2016-0287/): Information disclosure in ibm:i access (high 7.8)
- [CVE-2016-0286](https://insights.sbomify.com/CVE-2016-0286/): Information disclosure in ibm:tivoli business service manager (high 8.8)
- [CVE-2016-0285](https://insights.sbomify.com/CVE-2016-0285/): Cross-site scripting in ibm:rational team concert (medium 5.4)
- [CVE-2016-0284](https://insights.sbomify.com/CVE-2016-0284/): XML external entity in ibm:rational collaborative lifecycle management (medium 5.4)
- [CVE-2016-0283](https://insights.sbomify.com/CVE-2016-0283/): Cross-site scripting in ibm:websphere application server (medium 6.1)
- [CVE-2016-0282](https://insights.sbomify.com/CVE-2016-0282/): Cross-site scripting in ibm:lotus inotes (medium 5.4)
- [CVE-2016-0281](https://insights.sbomify.com/CVE-2016-0281/): Denial of service in ibm:aix (low 3.7)
- [CVE-2016-0280](https://insights.sbomify.com/CVE-2016-0280/): Cross-site scripting in ibm:information server framework (medium 5.4)
- [CVE-2016-0279](https://insights.sbomify.com/CVE-2016-0279/): Memory corruption in ibm:domino (high 7.8)
- [CVE-2016-0278](https://insights.sbomify.com/CVE-2016-0278/): Memory corruption in ibm:domino (high 7.8)
- [CVE-2016-0277](https://insights.sbomify.com/CVE-2016-0277/): Memory corruption in ibm:domino (high 7.8)
- [CVE-2016-0276](https://insights.sbomify.com/CVE-2016-0276/): Deserialization in ibm:financial transaction manager (medium 6.3)
- [CVE-2016-0275](https://insights.sbomify.com/CVE-2016-0275/): Information disclosure in ibm:financial transaction manager (low 3.3)
- [CVE-2016-0274](https://insights.sbomify.com/CVE-2016-0274/): Other in ibm:financial transaction manager (medium 5.4)
- [CVE-2016-0273](https://insights.sbomify.com/CVE-2016-0273/): Cross-site scripting in ibm:rational collaborative lifecycle management (medium 5.4)
- [CVE-2016-0272](https://insights.sbomify.com/CVE-2016-0272/): Cross-site request forgery in ibm:financial transaction manager (high 8.0)
- [CVE-2016-0271](https://insights.sbomify.com/CVE-2016-0271/): Auth bypass in ibm:urbancode deploy (high 8.2)
- [CVE-2016-0270](https://insights.sbomify.com/CVE-2016-0270/): Weak cryptography in ibm:client application access (medium 5.9)
- [CVE-2016-0269](https://insights.sbomify.com/CVE-2016-0269/): Cross-site scripting in ibm:bigfix platform (medium 5.4)
- [CVE-2016-0268](https://insights.sbomify.com/CVE-2016-0268/): XML external entity in ibm:financial transaction manager (medium 4.3)
- [CVE-2016-0267](https://insights.sbomify.com/CVE-2016-0267/): Information disclosure in ibm:urbancode deploy (high 7.7)
- [CVE-2016-0266](https://insights.sbomify.com/CVE-2016-0266/): Weak cryptography in ibm:aix (low 3.7)
- [CVE-2016-0265](https://insights.sbomify.com/CVE-2016-0265/): Cross-site scripting in Campaign (medium 5.4)
- [CVE-2016-0264](https://insights.sbomify.com/CVE-2016-0264/): Memory corruption in ibm:java sdk (medium 5.6)
- [CVE-2016-0263](https://insights.sbomify.com/CVE-2016-0263/): Privilege escalation in ibm:general parallel file system storage server (high 7.0)
- [CVE-2016-0262](https://insights.sbomify.com/CVE-2016-0262/): Cross-site scripting in ibm:maximo asset management (medium 5.4)
- [CVE-2016-0261](https://insights.sbomify.com/CVE-2016-0261/): Cross-site scripting in ibm:care management (medium 5.4)
- [CVE-2016-0260](https://insights.sbomify.com/CVE-2016-0260/): Denial of service in ibm:websphere mq (high 7.5)
- [CVE-2016-0259](https://insights.sbomify.com/CVE-2016-0259/): Missing authorization in ibm:websphere mq (low 2.5)
- [CVE-2016-0255](https://insights.sbomify.com/CVE-2016-0255/): Cross-site scripting in Marketing Platform (medium 6.1)
- [CVE-2016-0254](https://insights.sbomify.com/CVE-2016-0254/): XML external entity in Cognos Business Intelligence (medium 6.5)
- [CVE-2016-0253](https://insights.sbomify.com/CVE-2016-0253/): Cross-site scripting in ibm:financial transaction manager (medium 5.4)
- [CVE-2016-0252](https://insights.sbomify.com/CVE-2016-0252/): Weak cryptography in ibm:control center (medium 5.1)
- [CVE-2016-0250](https://insights.sbomify.com/CVE-2016-0250/): XML external entity in ibm:infosphere information server (medium 5.4)
- [CVE-2016-0249](https://insights.sbomify.com/CVE-2016-0249/): SQL injection in ibm:security guardium (high 8.6)
- [CVE-2016-0248](https://insights.sbomify.com/CVE-2016-0248/): Information disclosure in ibm:security guardium (low 3.7)
- [CVE-2016-0247](https://insights.sbomify.com/CVE-2016-0247/): Information disclosure in ibm:security guardium (high 7.8)
- [CVE-2016-0246](https://insights.sbomify.com/CVE-2016-0246/): Cross-site scripting in ibm:security guardium (medium 6.1)
- [CVE-2016-0245](https://insights.sbomify.com/CVE-2016-0245/): XML external entity in ibm:websphere portal (medium 5.4)
- [CVE-2016-0244](https://insights.sbomify.com/CVE-2016-0244/): Cross-site scripting in ibm:websphere portal (medium 6.1)
- [CVE-2016-0243](https://insights.sbomify.com/CVE-2016-0243/): Cross-site scripting in ibm:websphere portal (medium 6.1)
- [CVE-2016-0242](https://insights.sbomify.com/CVE-2016-0242/): Information disclosure in ibm:security guardium (medium 4.3)
- [CVE-2016-0241](https://insights.sbomify.com/CVE-2016-0241/): Auth bypass in ibm:security guardium database activity monitor (high 8.8)
- [CVE-2016-0240](https://insights.sbomify.com/CVE-2016-0240/): Misconfiguration in ibm:security guardium database activity monitor (low 3.7)
- [CVE-2016-0239](https://insights.sbomify.com/CVE-2016-0239/): Privilege escalation in ibm:security guardium database activity monitor (high 8.8)
- [CVE-2016-0238](https://insights.sbomify.com/CVE-2016-0238/): Information disclosure in Security Guardium (low 3.7)
- [CVE-2016-0237](https://insights.sbomify.com/CVE-2016-0237/): Information disclosure in ibm:security guardium database activity monitor (medium 5.5)
- [CVE-2016-0236](https://insights.sbomify.com/CVE-2016-0236/): Command injection in ibm:security guardium database activity monitor (high 8.8)
- [CVE-2016-0235](https://insights.sbomify.com/CVE-2016-0235/): Hardcoded credentials in ibm:security guardium database activity monitor (high 8.2)
- [CVE-2016-0234](https://insights.sbomify.com/CVE-2016-0234/): Information disclosure in OpenPages GRC Platform (medium 4.0)
- [CVE-2016-0233](https://insights.sbomify.com/CVE-2016-0233/): SQL injection in ibm:marketing platform (high 8.8)
- [CVE-2016-0232](https://insights.sbomify.com/CVE-2016-0232/): Information disclosure in ibm:financial transaction manager (medium 4.3)
- [CVE-2016-0231](https://insights.sbomify.com/CVE-2016-0231/): Information disclosure in ibm:financial transaction manager (medium 4.3)
- [CVE-2016-0230](https://insights.sbomify.com/CVE-2016-0230/): Privilege escalation in ibm:hardware management console (medium 6.8)
- [CVE-2016-0229](https://insights.sbomify.com/CVE-2016-0229/): Cross-site scripting in ibm:marketing platform (medium 6.1)
- [CVE-2016-0228](https://insights.sbomify.com/CVE-2016-0228/): Open redirect in Marketing Platform (medium 5.4)
- [CVE-2016-0227](https://insights.sbomify.com/CVE-2016-0227/): Cross-site scripting in ibm:business process manager (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/92/