# Vulnerabilities published in 2019 - [CVE-2019-4548](https://insights.sbomify.com/CVE-2019-4548/): Other in Security Directory Server (medium 6.1) - [CVE-2019-4547](https://insights.sbomify.com/CVE-2019-4547/): Information disclosure in Security Directory Server (medium 5.3) - [CVE-2019-4546](https://insights.sbomify.com/CVE-2019-4546/): Privilege escalation in Maximo Health- Safety and Environment Manager (medium 5.4) - [CVE-2019-4545](https://insights.sbomify.com/CVE-2019-4545/): Auth bypass in QRadar SIEM (high 7.5) - [CVE-2019-4542](https://insights.sbomify.com/CVE-2019-4542/): Cross-site scripting in Security Directory Server (medium 6.1) - [CVE-2019-4541](https://insights.sbomify.com/CVE-2019-4541/): Security feature bypass in Security Directory Server (medium 6.5) - [CVE-2019-4540](https://insights.sbomify.com/CVE-2019-4540/): Weak cryptography in Security Directory Server (medium 5.9) - [CVE-2019-4539](https://insights.sbomify.com/CVE-2019-4539/): Other in Security Directory Server (high 7.1) - [CVE-2019-4538](https://insights.sbomify.com/CVE-2019-4538/): Open redirect in Security Directory Server (high 7.4) - [CVE-2019-4537](https://insights.sbomify.com/CVE-2019-4537/): Information disclosure in WebSphere Service Registry and Repository (medium 5.3) - [CVE-2019-4536](https://insights.sbomify.com/CVE-2019-4536/): Privilege escalation in i (medium 6.7) - [CVE-2019-4533](https://insights.sbomify.com/CVE-2019-4533/): Denial of service in Resilient SOAR (medium 4.3) - [CVE-2019-4530](https://insights.sbomify.com/CVE-2019-4530/): Missing authorization in Maximo Asset Management (medium 4.3) - [CVE-2019-4523](https://insights.sbomify.com/CVE-2019-4523/): Memory corruption in DB2 High Performance Unload load for LUW (high 8.4) - [CVE-2019-4521](https://insights.sbomify.com/CVE-2019-4521/): Code injection in Cloud Pak System (high 7.0) - [CVE-2019-4520](https://insights.sbomify.com/CVE-2019-4520/): Auth bypass in Security Directory Server (high 7.5) - [CVE-2019-4515](https://insights.sbomify.com/CVE-2019-4515/): Cross-site request forgery in Security Key Lifecycle Manager (medium 4.3) - [CVE-2019-4514](https://insights.sbomify.com/CVE-2019-4514/): Information disclosure in Security Key Lifecycle Manager (medium 5.3) - [CVE-2019-4513](https://insights.sbomify.com/CVE-2019-4513/): XML external entity in Security Access Manager for Enterprise Single Sign-On (high 8.2) - [CVE-2019-4512](https://insights.sbomify.com/CVE-2019-4512/): Information disclosure in Maximo Asset Management (medium 4.3) - [CVE-2019-4509](https://insights.sbomify.com/CVE-2019-4509/): Missing authorization in QRadar (medium 4.3) - [CVE-2019-4508](https://insights.sbomify.com/CVE-2019-4508/): Weak cryptography in QRadar SIEM (medium 5.1) - [CVE-2019-4505](https://insights.sbomify.com/CVE-2019-4505/): Information disclosure in WebSphere Application Server (low 3.7) - [CVE-2019-4497](https://insights.sbomify.com/CVE-2019-4497/): Cross-site scripting in Jazz Reporting Service (medium 5.4) - [CVE-2019-4495](https://insights.sbomify.com/CVE-2019-4495/): Cross-site scripting in Jazz Reporting Service (medium 5.4) - [CVE-2019-4494](https://insights.sbomify.com/CVE-2019-4494/): Cross-site scripting in Jazz Reporting Service (medium 5.4) - [CVE-2019-4486](https://insights.sbomify.com/CVE-2019-4486/): Cross-site scripting in Maximo Asset Management (medium 5.4) - [CVE-2019-4485](https://insights.sbomify.com/CVE-2019-4485/): Information disclosure in Contract Management (medium 4.3) - [CVE-2019-4484](https://insights.sbomify.com/CVE-2019-4484/): Information disclosure in Contract Management (medium 4.3) - [CVE-2019-4483](https://insights.sbomify.com/CVE-2019-4483/): SQL injection in Contract Management (high 7.6) - [CVE-2019-4482](https://insights.sbomify.com/CVE-2019-4482/): Cross-site scripting in Emptoris Spend Analysis (medium 5.4) - [CVE-2019-4481](https://insights.sbomify.com/CVE-2019-4481/): SQL injection in Contract Management (high 7.6) - [CVE-2019-4478](https://insights.sbomify.com/CVE-2019-4478/): Information disclosure in Maximo Asset Management (medium 6.5) - [CVE-2019-4477](https://insights.sbomify.com/CVE-2019-4477/): Information disclosure in WebSphere Application Server (medium 5.3) - [CVE-2019-4473](https://insights.sbomify.com/CVE-2019-4473/): Privilege escalation in Java (high 8.4) - [CVE-2019-4471](https://insights.sbomify.com/CVE-2019-4471/): Information disclosure in Cognos Analytics (medium 5.3) - [CVE-2019-4470](https://insights.sbomify.com/CVE-2019-4470/): Cross-site scripting in QRadar (medium 5.4) - [CVE-2019-4468](https://insights.sbomify.com/CVE-2019-4468/): Cross-site scripting in Cloud Pak System (medium 5.4) - [CVE-2019-4467](https://insights.sbomify.com/CVE-2019-4467/): Cross-site scripting in Cloud Pak System (medium 5.4) - [CVE-2019-4465](https://insights.sbomify.com/CVE-2019-4465/): Information disclosure in Cloud Pak System (medium 4.0) - [CVE-2019-4461](https://insights.sbomify.com/CVE-2019-4461/): Other in Cloud Orchestrator (medium 5.4) - [CVE-2019-4460](https://insights.sbomify.com/CVE-2019-4460/): Path traversal in API Connect (medium 4.3) - [CVE-2019-4459](https://insights.sbomify.com/CVE-2019-4459/): Cross-site scripting in Cloud Orchestrator (medium 5.4) - [CVE-2019-4457](https://insights.sbomify.com/CVE-2019-4457/): Information disclosure in Rational Rhapsody Design Manager (medium 4.3) - [CVE-2019-4456](https://insights.sbomify.com/CVE-2019-4456/): XML external entity in Daeja ViewONE (high 7.1) - [CVE-2019-4454](https://insights.sbomify.com/CVE-2019-4454/): Cross-site scripting in QRadar (medium 5.4) - [CVE-2019-4451](https://insights.sbomify.com/CVE-2019-4451/): Cross-site scripting in Security Identity Manager (medium 5.4) - [CVE-2019-4450](https://insights.sbomify.com/CVE-2019-4450/): Cross-site scripting in i (medium 6.1) - [CVE-2019-4448](https://insights.sbomify.com/CVE-2019-4448/): Privilege escalation in DB2 High Performance Unload load for LUW (high 8.4) - [CVE-2019-4447](https://insights.sbomify.com/CVE-2019-4447/): Privilege escalation in DB2 High Performance Unload load for LUW (high 8.4) - [CVE-2019-4446](https://insights.sbomify.com/CVE-2019-4446/): Missing authorization in Maximo Asset Management (medium 5.4) - [CVE-2019-4444](https://insights.sbomify.com/CVE-2019-4444/): Information disclosure in API Connect (medium 5.1) - [CVE-2019-4442](https://insights.sbomify.com/CVE-2019-4442/): Path traversal in WebSphere Application Server (medium 4.3) - [CVE-2019-4441](https://insights.sbomify.com/CVE-2019-4441/): Information disclosure in WebSphere Application Server (medium 5.3) - [CVE-2019-4439](https://insights.sbomify.com/CVE-2019-4439/): Auth bypass in Cloud Private (medium 5.9) - [CVE-2019-4437](https://insights.sbomify.com/CVE-2019-4437/): Information disclosure in API Connect (high 8.2) - [CVE-2019-4433](https://insights.sbomify.com/CVE-2019-4433/): XML external entity in InfoSphere Global Name Management (high 7.1) - [CVE-2019-4431](https://insights.sbomify.com/CVE-2019-4431/): Cross-site scripting in Rational Publishing Engine (medium 5.4) - [CVE-2019-4430](https://insights.sbomify.com/CVE-2019-4430/): Path traversal in Maximo Asset Management (medium 4.3) - [CVE-2019-4429](https://insights.sbomify.com/CVE-2019-4429/): Cross-site scripting in Maximo Asset Management (medium 5.4) - [CVE-2019-4428](https://insights.sbomify.com/CVE-2019-4428/): Cross-site scripting in Watson Assistant for IBM Cloud Pak for Data (medium 5.4) - [CVE-2019-4427](https://insights.sbomify.com/CVE-2019-4427/): Weak cryptography in Cloud CLI (medium 5.9) - [CVE-2019-4426](https://insights.sbomify.com/CVE-2019-4426/): Cross-site scripting in Business Automation Workflow (medium 5.4) - [CVE-2019-4425](https://insights.sbomify.com/CVE-2019-4425/): Information disclosure in Business Automation Workflow (medium 5.7) - [CVE-2019-4424](https://insights.sbomify.com/CVE-2019-4424/): XML external entity in Business Automation Workflow (high 7.1) - [CVE-2019-4423](https://insights.sbomify.com/CVE-2019-4423/): Path traversal in Sterling File Gateway (medium 5.3) - [CVE-2019-4422](https://insights.sbomify.com/CVE-2019-4422/): Privilege escalation in Security Guardium (high 8.8) - [CVE-2019-4420](https://insights.sbomify.com/CVE-2019-4420/): Information disclosure in Intelligent Operations Center (medium 6.2) - [CVE-2019-4419](https://insights.sbomify.com/CVE-2019-4419/): XML external entity in Intelligent Operations Center (high 7.1) - [CVE-2019-4415](https://insights.sbomify.com/CVE-2019-4415/): Privilege escalation in Cloud Private (medium 4.9) - [CVE-2019-4412](https://insights.sbomify.com/CVE-2019-4412/): Information disclosure in Cognos Controller (low 3.7) - [CVE-2019-4411](https://insights.sbomify.com/CVE-2019-4411/): Weak cryptography in Cognos Controller (medium 4.3) - [CVE-2019-4410](https://insights.sbomify.com/CVE-2019-4410/): Cross-site scripting in Business Automation Workflow (medium 5.4) - [CVE-2019-4409](https://insights.sbomify.com/CVE-2019-4409/): Cross-site scripting in HCL Traveler (medium 5.4) - [CVE-2019-4406](https://insights.sbomify.com/CVE-2019-4406/): Denial of service in Spectrum Protect Backup-Archive Client (medium 4.4) - [CVE-2019-4403](https://insights.sbomify.com/CVE-2019-4403/): Cross-site scripting in Connections (medium 5.4) - [CVE-2019-4402](https://insights.sbomify.com/CVE-2019-4402/): Denial of service in API Connect (high 8.6) - [CVE-2019-4400](https://insights.sbomify.com/CVE-2019-4400/): Path traversal in Cloud Orchestrator (medium 4.3) - [CVE-2019-4399](https://insights.sbomify.com/CVE-2019-4399/): Weak cryptography in Cloud Orchestrator (medium 5.9) - [CVE-2019-4398](https://insights.sbomify.com/CVE-2019-4398/): Information disclosure in Cloud Orchestrator (medium 4.0) - [CVE-2019-4397](https://insights.sbomify.com/CVE-2019-4397/): Information disclosure in Cloud Orchestrator (medium 5.3) - [CVE-2019-4396](https://insights.sbomify.com/CVE-2019-4396/): Other in Cloud Orchestrator (medium 5.4) - [CVE-2019-4395](https://insights.sbomify.com/CVE-2019-4395/): Information disclosure in Cloud Orchestrator (medium 4.0) - [CVE-2019-4394](https://insights.sbomify.com/CVE-2019-4394/): Missing authorization in Cloud Orchestrator (low 2.3) - [CVE-2019-4393](https://insights.sbomify.com/CVE-2019-4393/): Auth bypass in HCL AppScan Standard Edition (critical 9.8) - [CVE-2019-4392](https://insights.sbomify.com/CVE-2019-4392/): Hardcoded credentials in HCL AppScan Standard Edition (critical 9.8) - [CVE-2019-4391](https://insights.sbomify.com/CVE-2019-4391/): XML external entity in HCL AppScan Standard Edition (high 8.2) - [CVE-2019-4388](https://insights.sbomify.com/CVE-2019-4388/): Cross-site scripting in AppScan Source (medium 4.8) - [CVE-2019-4387](https://insights.sbomify.com/CVE-2019-4387/): SQL injection in Sterling B2B Integrator (medium 6.3) - [CVE-2019-4386](https://insights.sbomify.com/CVE-2019-4386/): Denial of service in DB2 for Linux, UNIX and Windows (medium 6.5) - [CVE-2019-4385](https://insights.sbomify.com/CVE-2019-4385/): Information disclosure in Spectrum Protect Plus (medium 5.9) - [CVE-2019-4384](https://insights.sbomify.com/CVE-2019-4384/): Path traversal in Campaign (medium 4.3) - [CVE-2019-4383](https://insights.sbomify.com/CVE-2019-4383/): Privilege escalation in Spectrum Protect Plus (high 7.9) - [CVE-2019-4382](https://insights.sbomify.com/CVE-2019-4382/): Information disclosure in API Connect (medium 5.3) - [CVE-2019-4381](https://insights.sbomify.com/CVE-2019-4381/): Information disclosure in i (medium 5.9) - [CVE-2019-4378](https://insights.sbomify.com/CVE-2019-4378/): Denial of service in MQ (medium 5.3) - [CVE-2019-4377](https://insights.sbomify.com/CVE-2019-4377/): Information disclosure in Sterling B2B Integrator (medium 4.3) - [CVE-2019-4366](https://insights.sbomify.com/CVE-2019-4366/): Information disclosure in Cognos Analytics (low 2.9) - [CVE-2019-4364](https://insights.sbomify.com/CVE-2019-4364/): Code injection in Maximo Asset Management (medium 5.5) - [CVE-2019-4357](https://insights.sbomify.com/CVE-2019-4357/): Code injection in Spectrum Protect Plus (high 8.2) --- From sbomify Insights: https://insights.sbomify.com/years/2019/page/43/