# Vulnerabilities published in 2019


- [CVE-2019-4352](https://insights.sbomify.com/CVE-2019-4352/): Other in Maximo Anywhere (low 2.4)
- [CVE-2019-4351](https://insights.sbomify.com/CVE-2019-4351/): Information disclosure in Maximo Anywhere (low 2.1)
- [CVE-2019-4349](https://insights.sbomify.com/CVE-2019-4349/): Information disclosure in Maximo Anywhere (low 3.5)
- [CVE-2019-4343](https://insights.sbomify.com/CVE-2019-4343/): Misconfiguration in Cognos Analytics (medium 6.5)
- [CVE-2019-4342](https://insights.sbomify.com/CVE-2019-4342/): Cross-site scripting in Cognos Analytics (medium 5.4)
- [CVE-2019-4340](https://insights.sbomify.com/CVE-2019-4340/): XML external entity in Security Guardium Big Data Intelligence (high 7.1)
- [CVE-2019-4339](https://insights.sbomify.com/CVE-2019-4339/): Weak cryptography in Security Guardium Big Data Intelligence (medium 5.9)
- [CVE-2019-4338](https://insights.sbomify.com/CVE-2019-4338/): Denial of service in Security Guardium Big Data Intelligence (high 7.5)
- [CVE-2019-4337](https://insights.sbomify.com/CVE-2019-4337/): Missing authorization in Robotic Process Automation with Automation Anywhere (medium 5.3)
- [CVE-2019-4336](https://insights.sbomify.com/CVE-2019-4336/): Auth bypass in Robotic Process Automation with Automation Anywhere (high 7.5)
- [CVE-2019-4335](https://insights.sbomify.com/CVE-2019-4335/): Information disclosure in Watson Studio Local (medium 6.2)
- [CVE-2019-4334](https://insights.sbomify.com/CVE-2019-4334/): Information disclosure in Cognos Analytics (medium 4.3)
- [CVE-2019-4330](https://insights.sbomify.com/CVE-2019-4330/): Misconfiguration in Security Guardium Big Data Intelligence (low 3.1)
- [CVE-2019-4329](https://insights.sbomify.com/CVE-2019-4329/): Security feature bypass in Security Guardium Big Data Intelligence (medium 4.3)
- [CVE-2019-4327](https://insights.sbomify.com/CVE-2019-4327/): Hardcoded credentials in "HCL AppScan Enterprise Edition" (high 7.5)
- [CVE-2019-4326](https://insights.sbomify.com/CVE-2019-4326/): Misconfiguration in "HCL AppScan Enterprise " (high 7.5)
- [CVE-2019-4325](https://insights.sbomify.com/CVE-2019-4325/): Weak cryptography in "HCL AppScan Enterprise " (medium 5.3)
- [CVE-2019-4324](https://insights.sbomify.com/CVE-2019-4324/): Cross-site scripting in "HCL AppScan Enterprise" (medium 6.1)
- [CVE-2019-4323](https://insights.sbomify.com/CVE-2019-4323/): Other in "HCL AppScan Enterprise" (medium 4.3)
- [CVE-2019-4322](https://insights.sbomify.com/CVE-2019-4322/): Memory corruption in DB2 for Linux, UNIX and Windows (high 8.4)
- [CVE-2019-4321](https://insights.sbomify.com/CVE-2019-4321/): Misconfiguration in Intelligent Operations Center (medium 5.9)
- [CVE-2019-4314](https://insights.sbomify.com/CVE-2019-4314/): Information disclosure in Security Guardium Big Data Intelligence (medium 5.9)
- [CVE-2019-4311](https://insights.sbomify.com/CVE-2019-4311/): Information disclosure in Security Guardium Big Data Intelligence (medium 5.3)
- [CVE-2019-4310](https://insights.sbomify.com/CVE-2019-4310/): Auth bypass in Security Guardium Big Data Intelligence (high 7.5)
- [CVE-2019-4309](https://insights.sbomify.com/CVE-2019-4309/): Hardcoded credentials in Security Guardium Big Data Intelligence (medium 5.9)
- [CVE-2019-4308](https://insights.sbomify.com/CVE-2019-4308/): Information disclosure in Contract Management (medium 4.3)
- [CVE-2019-4307](https://insights.sbomify.com/CVE-2019-4307/): Information disclosure in Security Guardium Big Data Intelligence (medium 5.1)
- [CVE-2019-4306](https://insights.sbomify.com/CVE-2019-4306/): Misconfiguration in Security Guardium Big Data Intelligence (medium 6.5)
- [CVE-2019-4305](https://insights.sbomify.com/CVE-2019-4305/): Information disclosure in WebSphere Application Server (medium 5.3)
- [CVE-2019-4304](https://insights.sbomify.com/CVE-2019-4304/): Auth bypass in WebSphere Application Server (medium 6.3)
- [CVE-2019-4303](https://insights.sbomify.com/CVE-2019-4303/): Cross-site scripting in Maximo Asset Management (medium 5.4)
- [CVE-2019-4301](https://insights.sbomify.com/CVE-2019-4301/): Cross-site scripting in HCL BigFix Self-Service Application (SSA) (high 8.4)
- [CVE-2019-4299](https://insights.sbomify.com/CVE-2019-4299/): Information disclosure in Robotic Process Automation with Automation Anywhere (medium 5.1)
- [CVE-2019-4298](https://insights.sbomify.com/CVE-2019-4298/): Privilege escalation in Robotic Process Automation with Automation Anywhere (high 7.7)
- [CVE-2019-4297](https://insights.sbomify.com/CVE-2019-4297/): Other in Robotic Process Automation with Automation Anywhere (medium 6.4)
- [CVE-2019-4296](https://insights.sbomify.com/CVE-2019-4296/): Information disclosure in Robotic Process Automation with Automation Anywhere (medium 4.0)
- [CVE-2019-4295](https://insights.sbomify.com/CVE-2019-4295/): Information disclosure in Robotic Process Automation with Automation Anywhere (medium 4.9)
- [CVE-2019-4294](https://insights.sbomify.com/CVE-2019-4294/): Command injection in DataPower Gateway (high 8.4)
- [CVE-2019-4293](https://insights.sbomify.com/CVE-2019-4293/): Information disclosure in Storwize V7000 Unified (2073) (medium 5.3)
- [CVE-2019-4292](https://insights.sbomify.com/CVE-2019-4292/): File upload in Security Guardium (high 8.8)
- [CVE-2019-4291](https://insights.sbomify.com/CVE-2019-4291/): Weak cryptography in Maximo Anywhere (medium 6.5)
- [CVE-2019-4288](https://insights.sbomify.com/CVE-2019-4288/): Information disclosure in Maximo Anywhere (medium 4.3)
- [CVE-2019-4286](https://insights.sbomify.com/CVE-2019-4286/): Information disclosure in Maximo Anywhere (medium 4.3)
- [CVE-2019-4285](https://insights.sbomify.com/CVE-2019-4285/): Other in WebSphere Application Server (medium 5.4)
- [CVE-2019-4284](https://insights.sbomify.com/CVE-2019-4284/): Information disclosure in Cloud Private (medium 4.4)
- [CVE-2019-4280](https://insights.sbomify.com/CVE-2019-4280/): Information disclosure in Sterling File Gateway (medium 5.3)
- [CVE-2019-4279](https://insights.sbomify.com/CVE-2019-4279/): Deserialization in WebSphere Application Server (critical 9.0)
- [CVE-2019-4275](https://insights.sbomify.com/CVE-2019-4275/): Denial of service in Jazz for Service Management (medium 6.2)
- [CVE-2019-4271](https://insights.sbomify.com/CVE-2019-4271/): Other in WebSphere Application Server (low 3.5)
- [CVE-2019-4270](https://insights.sbomify.com/CVE-2019-4270/): Cross-site scripting in WebSphere Application Server (medium 5.4)
- [CVE-2019-4269](https://insights.sbomify.com/CVE-2019-4269/): Information disclosure in WebSphere Application Server (medium 5.3)
- [CVE-2019-4268](https://insights.sbomify.com/CVE-2019-4268/): Path traversal in WebSphere Application Server (medium 5.3)
- [CVE-2019-4267](https://insights.sbomify.com/CVE-2019-4267/): Memory corruption in Spectrum Protect (medium 4.9)
- [CVE-2019-4266](https://insights.sbomify.com/CVE-2019-4266/): Security feature bypass in Maximo Anywhere (low 2.4)
- [CVE-2019-4265](https://insights.sbomify.com/CVE-2019-4265/): Security feature bypass in Maximo Anywhere (low 2.4)
- [CVE-2019-4264](https://insights.sbomify.com/CVE-2019-4264/): Weak cryptography in QRadar SIEM (medium 5.9)
- [CVE-2019-4263](https://insights.sbomify.com/CVE-2019-4263/): Path traversal in Content Navigator (medium 4.3)
- [CVE-2019-4262](https://insights.sbomify.com/CVE-2019-4262/): Server-side request forgery in QRadar SIEM (medium 5.3)
- [CVE-2019-4261](https://insights.sbomify.com/CVE-2019-4261/): Denial of service in MQ (medium 4.3)
- [CVE-2019-4260](https://insights.sbomify.com/CVE-2019-4260/): Information disclosure in Daeja ViewONE (medium 5.3)
- [CVE-2019-4259](https://insights.sbomify.com/CVE-2019-4259/): Information disclosure in Spectrum Scale (medium 4.0)
- [CVE-2019-4258](https://insights.sbomify.com/CVE-2019-4258/): Cross-site scripting in Sterling B2B Integrator (medium 5.4)
- [CVE-2019-4257](https://insights.sbomify.com/CVE-2019-4257/): Information disclosure in InfoSphere Information Server (medium 4.3)
- [CVE-2019-4256](https://insights.sbomify.com/CVE-2019-4256/): Weak cryptography in API Connect (medium 5.9)
- [CVE-2019-4253](https://insights.sbomify.com/CVE-2019-4253/): Privilege escalation in Informix Dynamic Server Enterprise Edition (high 7.8)
- [CVE-2019-4252](https://insights.sbomify.com/CVE-2019-4252/): Path traversal in Rational Collaborative Lifecycle Management (medium 6.5)
- [CVE-2019-4250](https://insights.sbomify.com/CVE-2019-4250/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2019-4249](https://insights.sbomify.com/CVE-2019-4249/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2019-4246](https://insights.sbomify.com/CVE-2019-4246/): Information disclosure in Daeja ViewONE Virtual (low 3.7)
- [CVE-2019-4244](https://insights.sbomify.com/CVE-2019-4244/): Missing authorization in SmartCloud Analytics (critical 9.1)
- [CVE-2019-4243](https://insights.sbomify.com/CVE-2019-4243/): Missing authorization in SmartCloud Analytics (medium 5.1)
- [CVE-2019-4241](https://insights.sbomify.com/CVE-2019-4241/): Auth bypass in PureApplication System (high 8.4)
- [CVE-2019-4239](https://insights.sbomify.com/CVE-2019-4239/): Information disclosure in MQ Advanced Cloud Pak (IBM Cloud Private on RedHat OpenShift) (medium 6.2)
- [CVE-2019-4238](https://insights.sbomify.com/CVE-2019-4238/): Cross-site scripting in InfoSphere Information Server (medium 5.4)
- [CVE-2019-4237](https://insights.sbomify.com/CVE-2019-4237/): Cross-site scripting in InfoSphere Information Server (medium 5.4)
- [CVE-2019-4236](https://insights.sbomify.com/CVE-2019-4236/): Security feature bypass in Spectrum Protect (medium 5.1)
- [CVE-2019-4235](https://insights.sbomify.com/CVE-2019-4235/): Misconfiguration in PureApplication System (medium 5.9)
- [CVE-2019-4234](https://insights.sbomify.com/CVE-2019-4234/): Business logic in PureApplication System (medium 4.3)
- [CVE-2019-4231](https://insights.sbomify.com/CVE-2019-4231/): Cross-site request forgery in Cognos Analytics (medium 4.3)
- [CVE-2019-4227](https://insights.sbomify.com/CVE-2019-4227/): Auth bypass in MQ (medium 5.6)
- [CVE-2019-4226](https://insights.sbomify.com/CVE-2019-4226/): Cross-site scripting in Cloud Pak System (medium 5.4)
- [CVE-2019-4225](https://insights.sbomify.com/CVE-2019-4225/): Information disclosure in PureApplication System (medium 4.4)
- [CVE-2019-4224](https://insights.sbomify.com/CVE-2019-4224/): SQL injection in PureApplication System (medium 6.3)
- [CVE-2019-4222](https://insights.sbomify.com/CVE-2019-4222/): Missing authorization in Sterling B2B Integrator (medium 4.3)
- [CVE-2019-4220](https://insights.sbomify.com/CVE-2019-4220/): Hardcoded credentials in InfoSphere Information Server (medium 6.2)
- [CVE-2019-4219](https://insights.sbomify.com/CVE-2019-4219/): Information disclosure in Security Information Queue (medium 4.3)
- [CVE-2019-4218](https://insights.sbomify.com/CVE-2019-4218/): Information disclosure in Security Information Queue (medium 4.0)
- [CVE-2019-4217](https://insights.sbomify.com/CVE-2019-4217/): Other in Security Information Queue (medium 6.1)
- [CVE-2019-4216](https://insights.sbomify.com/CVE-2019-4216/): Other in SmartCloud Analytics (medium 4.6)
- [CVE-2019-4215](https://insights.sbomify.com/CVE-2019-4215/): Other in SmartCloud Analytics (medium 6.1)
- [CVE-2019-4214](https://insights.sbomify.com/CVE-2019-4214/): Misconfiguration in SmartCloud Analytics (low 3.7)
- [CVE-2019-4212](https://insights.sbomify.com/CVE-2019-4212/): Cross-site request forgery in QRadar SIEM (medium 4.3)
- [CVE-2019-4211](https://insights.sbomify.com/CVE-2019-4211/): Cross-site scripting in QRadar SIEM (medium 5.4)
- [CVE-2019-4210](https://insights.sbomify.com/CVE-2019-4210/): Auth bypass in QRadar SIEM (critical 9.4)
- [CVE-2019-4209](https://insights.sbomify.com/CVE-2019-4209/): Open redirect in HCL Connections (medium 6.1)
- [CVE-2019-4208](https://insights.sbomify.com/CVE-2019-4208/): XML external entity in TRIRIGA Application Platform (high 7.1)
- [CVE-2019-4207](https://insights.sbomify.com/CVE-2019-4207/): Information disclosure in TRIRIGA Application Platform (medium 4.0)
- [CVE-2019-4204](https://insights.sbomify.com/CVE-2019-4204/): Cross-site scripting in Business Automation Workflow (medium 5.4)
- [CVE-2019-4203](https://insights.sbomify.com/CVE-2019-4203/): Server-side request forgery in API Connect (high 8.9)
- [CVE-2019-4202](https://insights.sbomify.com/CVE-2019-4202/): Command injection in API Connect (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/44/