# Vulnerabilities published in 2019


- [CVE-2019-4699](https://insights.sbomify.com/CVE-2019-4699/): Information disclosure in Security Guardium Data Encryption (low 2.7)
- [CVE-2019-4698](https://insights.sbomify.com/CVE-2019-4698/): Misconfiguration in Security Guardium Data Encryption (high 7.4)
- [CVE-2019-4697](https://insights.sbomify.com/CVE-2019-4697/): Information disclosure in Security Guardium Data Encryption (medium 5.3)
- [CVE-2019-4695](https://insights.sbomify.com/CVE-2019-4695/): Information disclosure in Security Guardium Data Encryption (medium 4.0)
- [CVE-2019-4694](https://insights.sbomify.com/CVE-2019-4694/): Hardcoded credentials in Security Guardium Data Encryption (medium 6.8)
- [CVE-2019-4693](https://insights.sbomify.com/CVE-2019-4693/): Information disclosure in Security Guardium Data Encryption (medium 6.0)
- [CVE-2019-4692](https://insights.sbomify.com/CVE-2019-4692/): Information disclosure in Security Guardium Data Encryption (medium 5.3)
- [CVE-2019-4691](https://insights.sbomify.com/CVE-2019-4691/): Cross-site scripting in Security Guardium Data Encryption (medium 5.4)
- [CVE-2019-4689](https://insights.sbomify.com/CVE-2019-4689/): Misconfiguration in Security Guardium Data Encryption (medium 5.9)
- [CVE-2019-4688](https://insights.sbomify.com/CVE-2019-4688/): Information disclosure in Security Guardium Data Encryption (low 3.7)
- [CVE-2019-4687](https://insights.sbomify.com/CVE-2019-4687/): Information disclosure in Security Guardium Data Encryption (low 3.7)
- [CVE-2019-4686](https://insights.sbomify.com/CVE-2019-4686/): Information disclosure in Security Guardium Data Encryption (low 3.7)
- [CVE-2019-4681](https://insights.sbomify.com/CVE-2019-4681/): Cross-site scripting in Tivoli Netcool Impact (medium 6.1)
- [CVE-2019-4680](https://insights.sbomify.com/CVE-2019-4680/): SQL injection in Sterling B2B Integrator (medium 6.3)
- [CVE-2019-4679](https://insights.sbomify.com/CVE-2019-4679/): Information disclosure in Content Navigator (medium 4.3)
- [CVE-2019-4676](https://insights.sbomify.com/CVE-2019-4676/): Information disclosure in Security Identity Manager Virtual Appliance (medium 6.3)
- [CVE-2019-4675](https://insights.sbomify.com/CVE-2019-4675/): Hardcoded credentials in Security Identity Manager (medium 6.8)
- [CVE-2019-4674](https://insights.sbomify.com/CVE-2019-4674/): Path traversal in Security Identity Manager (medium 6.8)
- [CVE-2019-4672](https://insights.sbomify.com/CVE-2019-4672/): Information disclosure in Qradar Advisor (medium 5.3)
- [CVE-2019-4671](https://insights.sbomify.com/CVE-2019-4671/): SQL injection in Maximo Asset Management (medium 6.3)
- [CVE-2019-4670](https://insights.sbomify.com/CVE-2019-4670/): Information disclosure in WebSphere Application Server (medium 6.5)
- [CVE-2019-4669](https://insights.sbomify.com/CVE-2019-4669/): SQL injection in Business Automation Workflow (medium 6.3)
- [CVE-2019-4668](https://insights.sbomify.com/CVE-2019-4668/): Information disclosure in UrbanCode Deploy (medium 6.2)
- [CVE-2019-4667](https://insights.sbomify.com/CVE-2019-4667/): Misconfiguration in UrbanCode Deploy (medium 5.9)
- [CVE-2019-4666](https://insights.sbomify.com/CVE-2019-4666/): Information disclosure in UrbanCode Build (low 2.3)
- [CVE-2019-4665](https://insights.sbomify.com/CVE-2019-4665/): Cross-site scripting in Spectrum Scale (medium 5.4)
- [CVE-2019-4663](https://insights.sbomify.com/CVE-2019-4663/): Cross-site scripting in WebSphere Application Server (medium 5.4)
- [CVE-2019-4656](https://insights.sbomify.com/CVE-2019-4656/): Denial of service in MQ (medium 6.5)
- [CVE-2019-4655](https://insights.sbomify.com/CVE-2019-4655/): Denial of service in MQ (medium 4.3)
- [CVE-2019-4654](https://insights.sbomify.com/CVE-2019-4654/): Security feature bypass in QRadar (low 3.7)
- [CVE-2019-4653](https://insights.sbomify.com/CVE-2019-4653/): Cross-site scripting in Cognos Analytics (medium 5.4)
- [CVE-2019-4652](https://insights.sbomify.com/CVE-2019-4652/): Misconfiguration in Spectrum Protect Plus (medium 5.1)
- [CVE-2019-4651](https://insights.sbomify.com/CVE-2019-4651/): SQL injection in Jazz Reporting Service (JRS) (medium 5.4)
- [CVE-2019-4650](https://insights.sbomify.com/CVE-2019-4650/): SQL injection in Maximo Asset Management (medium 6.3)
- [CVE-2019-4645](https://insights.sbomify.com/CVE-2019-4645/): Cross-site scripting in Cognos Analytics (medium 6.1)
- [CVE-2019-4644](https://insights.sbomify.com/CVE-2019-4644/): Cross-site scripting in Maximo Asset Management (medium 6.1)
- [CVE-2019-4640](https://insights.sbomify.com/CVE-2019-4640/): Security feature bypass in Security Secret Server (medium 4.4)
- [CVE-2019-4639](https://insights.sbomify.com/CVE-2019-4639/): Weak cryptography in Security Secret Server (medium 5.9)
- [CVE-2019-4638](https://insights.sbomify.com/CVE-2019-4638/): Misconfiguration in Security Secret Server (low 3.7)
- [CVE-2019-4637](https://insights.sbomify.com/CVE-2019-4637/): Security feature bypass in Security Secret Server (medium 4.3)
- [CVE-2019-4636](https://insights.sbomify.com/CVE-2019-4636/): Information disclosure in Security Secret Server (low 2.7)
- [CVE-2019-4635](https://insights.sbomify.com/CVE-2019-4635/): Command injection in Security Secret Server (low 2.7)
- [CVE-2019-4633](https://insights.sbomify.com/CVE-2019-4633/): Misconfiguration in Security Secret Server (low 3.1)
- [CVE-2019-4632](https://insights.sbomify.com/CVE-2019-4632/): Cross-site scripting in Security Secret Server (medium 6.1)
- [CVE-2019-4631](https://insights.sbomify.com/CVE-2019-4631/): Open redirect in Security Secret Server (high 7.4)
- [CVE-2019-4623](https://insights.sbomify.com/CVE-2019-4623/): Cross-site scripting in Cognos Analytics (medium 5.4)
- [CVE-2019-4621](https://insights.sbomify.com/CVE-2019-4621/): Hardcoded credentials in DataPower Gateway (high 8.1)
- [CVE-2019-4620](https://insights.sbomify.com/CVE-2019-4620/): Security feature bypass in MQ Appliance (high 8.4)
- [CVE-2019-4619](https://insights.sbomify.com/CVE-2019-4619/): Information disclosure in MQ (medium 5.1)
- [CVE-2019-4617](https://insights.sbomify.com/CVE-2019-4617/): Auth bypass in Cloud Automation Manager (medium 5.9)
- [CVE-2019-4616](https://insights.sbomify.com/CVE-2019-4616/): Information disclosure in Cloud Automation Manager (medium 4.3)
- [CVE-2019-4614](https://insights.sbomify.com/CVE-2019-4614/): Denial of service in MQ (medium 5.3)
- [CVE-2019-4613](https://insights.sbomify.com/CVE-2019-4613/): Cross-site request forgery in Planning Analytics (medium 4.3)
- [CVE-2019-4612](https://insights.sbomify.com/CVE-2019-4612/): File upload in Planning Analytics (medium 6.3)
- [CVE-2019-4611](https://insights.sbomify.com/CVE-2019-4611/): Cross-site scripting in Planning Analytics (medium 5.4)
- [CVE-2019-4609](https://insights.sbomify.com/CVE-2019-4609/): Weak cryptography in API Connect (medium 5.9)
- [CVE-2019-4608](https://insights.sbomify.com/CVE-2019-4608/): Cross-site scripting in Workload Scheduler (medium 5.4)
- [CVE-2019-4606](https://insights.sbomify.com/CVE-2019-4606/): Other in DB2 High Performance Unload load for LUW (high 7.4)
- [CVE-2019-4603](https://insights.sbomify.com/CVE-2019-4603/): Missing authorization in Rational Quality Manager (medium 4.3)
- [CVE-2019-4602](https://insights.sbomify.com/CVE-2019-4602/): Cross-site scripting in Rational Quality Manager (medium 5.4)
- [CVE-2019-4601](https://insights.sbomify.com/CVE-2019-4601/): Information disclosure in Rational Quality Manager (medium 4.3)
- [CVE-2019-4600](https://insights.sbomify.com/CVE-2019-4600/): Information disclosure in API Connect (medium 5.3)
- [CVE-2019-4598](https://insights.sbomify.com/CVE-2019-4598/): SQL injection in Sterling B2B Integrator (medium 6.3)
- [CVE-2019-4597](https://insights.sbomify.com/CVE-2019-4597/): SQL injection in Sterling B2B Integrator (medium 6.3)
- [CVE-2019-4596](https://insights.sbomify.com/CVE-2019-4596/): Cross-site scripting in Sterling B2B Integrator (medium 5.4)
- [CVE-2019-4595](https://insights.sbomify.com/CVE-2019-4595/): Open redirect in Sterling B2B Integrator (medium 6.8)
- [CVE-2019-4594](https://insights.sbomify.com/CVE-2019-4594/): Misconfiguration in QRadar (medium 5.9)
- [CVE-2019-4593](https://insights.sbomify.com/CVE-2019-4593/): Information disclosure in QRadar (medium 4.3)
- [CVE-2019-4592](https://insights.sbomify.com/CVE-2019-4592/): Missing authorization in Tivoli Monitoring (high 7.5)
- [CVE-2019-4591](https://insights.sbomify.com/CVE-2019-4591/): Auth bypass in Maximo Asset Management (medium 5.9)
- [CVE-2019-4589](https://insights.sbomify.com/CVE-2019-4589/): Privilege escalation in Cognos Analytics (medium 4.6)
- [CVE-2019-4588](https://insights.sbomify.com/CVE-2019-4588/): Other in DB2 for Linux, UNIX and Windows (high 7.4)
- [CVE-2019-4583](https://insights.sbomify.com/CVE-2019-4583/): Information disclosure in Maximo Asset Management (medium 4.3)
- [CVE-2019-4582](https://insights.sbomify.com/CVE-2019-4582/): Path traversal in Maximo Asset Management (medium 4.3)
- [CVE-2019-4581](https://insights.sbomify.com/CVE-2019-4581/): Cross-site scripting in QRadar (medium 6.1)
- [CVE-2019-4579](https://insights.sbomify.com/CVE-2019-4579/): Security feature bypass in Resilient SOAR (medium 4.3)
- [CVE-2019-4576](https://insights.sbomify.com/CVE-2019-4576/): Misconfiguration in QRadar Network Packet Capture Software (medium 5.9)
- [CVE-2019-4575](https://insights.sbomify.com/CVE-2019-4575/): SQL injection in Financial Transaction Manager (medium 5.3)
- [CVE-2019-4572](https://insights.sbomify.com/CVE-2019-4572/): Information disclosure in FileNet Content Manager (medium 4.1)
- [CVE-2019-4571](https://insights.sbomify.com/CVE-2019-4571/): Cross-site scripting in Content Navigator (medium 5.4)
- [CVE-2019-4570](https://insights.sbomify.com/CVE-2019-4570/): Information disclosure in Tivoli Netcool Impact (low 3.7)
- [CVE-2019-4569](https://insights.sbomify.com/CVE-2019-4569/): Cross-site scripting in Tivoli Netcool Impact (medium 5.4)
- [CVE-2019-4568](https://insights.sbomify.com/CVE-2019-4568/): Denial of service in MQ (medium 5.9)
- [CVE-2019-4566](https://insights.sbomify.com/CVE-2019-4566/): Information disclosure in Security Key Lifecycle Manager (medium 6.2)
- [CVE-2019-4565](https://insights.sbomify.com/CVE-2019-4565/): Misconfiguration in Security Key Lifecycle Manager (medium 5.9)
- [CVE-2019-4564](https://insights.sbomify.com/CVE-2019-4564/): Cross-site scripting in Security Key Lifecycle Manager (medium 6.1)
- [CVE-2019-4563](https://insights.sbomify.com/CVE-2019-4563/): Information disclosure in Security Directory Server (low 3.7)
- [CVE-2019-4562](https://insights.sbomify.com/CVE-2019-4562/): Information disclosure in Security Directory Server (low 3.7)
- [CVE-2019-4561](https://insights.sbomify.com/CVE-2019-4561/): Deserialization in Security Identity Manager (high 8.0)
- [CVE-2019-4560](https://insights.sbomify.com/CVE-2019-4560/): Denial of service in MQ (medium 5.3)
- [CVE-2019-4559](https://insights.sbomify.com/CVE-2019-4559/): Information disclosure in QRadar SIEM (medium 5.3)
- [CVE-2019-4558](https://insights.sbomify.com/CVE-2019-4558/): Privilege escalation in Spectrum Scale (high 8.1)
- [CVE-2019-4557](https://insights.sbomify.com/CVE-2019-4557/): Weak cryptography in Qradar Advisor (medium 5.9)
- [CVE-2019-4556](https://insights.sbomify.com/CVE-2019-4556/): Security feature bypass in Qradar Advisor (medium 4.3)
- [CVE-2019-4555](https://insights.sbomify.com/CVE-2019-4555/): Cross-site scripting in Cognos Analytics (medium 5.4)
- [CVE-2019-4553](https://insights.sbomify.com/CVE-2019-4553/): Weak cryptography in API Connect (medium 5.9)
- [CVE-2019-4552](https://insights.sbomify.com/CVE-2019-4552/): Other in Security Access Manager (medium 6.1)
- [CVE-2019-4551](https://insights.sbomify.com/CVE-2019-4551/): Auth bypass in Security Directory Server (medium 5.3)
- [CVE-2019-4550](https://insights.sbomify.com/CVE-2019-4550/): Misconfiguration in Security Directory Server (medium 5.3)
- [CVE-2019-4549](https://insights.sbomify.com/CVE-2019-4549/): Information disclosure in Security Directory Server (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/42/