# Vulnerabilities published in 2019


- [CVE-2019-4201](https://insights.sbomify.com/CVE-2019-4201/): Open redirect in Jazz for Service Management (high 7.4)
- [CVE-2019-4194](https://insights.sbomify.com/CVE-2019-4194/): Missing authorization in Jazz for Service Management (medium 5.3)
- [CVE-2019-4193](https://insights.sbomify.com/CVE-2019-4193/): Information disclosure in Jazz for Service Management (medium 5.9)
- [CVE-2019-4186](https://insights.sbomify.com/CVE-2019-4186/): Cross-site scripting in Jazz for Service Management (medium 5.3)
- [CVE-2019-4185](https://insights.sbomify.com/CVE-2019-4185/): Privilege escalation in InfoSphere Information Server (high 8.3)
- [CVE-2019-4184](https://insights.sbomify.com/CVE-2019-4184/): Cross-site scripting in Jazz Reporting Service (medium 5.4)
- [CVE-2019-4183](https://insights.sbomify.com/CVE-2019-4183/): Denial of service in Cognos Analytics (medium 5.9)
- [CVE-2019-4178](https://insights.sbomify.com/CVE-2019-4178/): Path traversal in Cognos Analytics (medium 6.4)
- [CVE-2019-4177](https://insights.sbomify.com/CVE-2019-4177/): Information disclosure in Cognos Controller (medium 4.0)
- [CVE-2019-4176](https://insights.sbomify.com/CVE-2019-4176/): Security feature bypass in Cognos Controller (medium 5.3)
- [CVE-2019-4175](https://insights.sbomify.com/CVE-2019-4175/): Weak cryptography in Cognos Controller (medium 5.9)
- [CVE-2019-4174](https://insights.sbomify.com/CVE-2019-4174/): Information disclosure in Cognos Controller (medium 4.0)
- [CVE-2019-4173](https://insights.sbomify.com/CVE-2019-4173/): Information disclosure in Cognos Controller (medium 6.5)
- [CVE-2019-4171](https://insights.sbomify.com/CVE-2019-4171/): Information disclosure in Cognos Controller (low 3.7)
- [CVE-2019-4169](https://insights.sbomify.com/CVE-2019-4169/): Hardcoded credentials in P9 OpenPOWER (high 8.1)
- [CVE-2019-4167](https://insights.sbomify.com/CVE-2019-4167/): Cross-site request forgery in StoredIQ (medium 4.3)
- [CVE-2019-4166](https://insights.sbomify.com/CVE-2019-4166/): Open redirect in StoredIQ (high 7.4)
- [CVE-2019-4165](https://insights.sbomify.com/CVE-2019-4165/): Denial of service in StoredIQ (medium 5.3)
- [CVE-2019-4163](https://insights.sbomify.com/CVE-2019-4163/): Information disclosure in StoredIQ (medium 4.3)
- [CVE-2019-4162](https://insights.sbomify.com/CVE-2019-4162/): Misconfiguration in Security Information Queue (medium 5.9)
- [CVE-2019-4161](https://insights.sbomify.com/CVE-2019-4161/): Information disclosure in Security Information Queue (medium 4.0)
- [CVE-2019-4160](https://insights.sbomify.com/CVE-2019-4160/): Weak cryptography in Security Guardium Data Encryption (medium 5.9)
- [CVE-2019-4158](https://insights.sbomify.com/CVE-2019-4158/): Missing authorization in Security Access Manager (medium 5.4)
- [CVE-2019-4157](https://insights.sbomify.com/CVE-2019-4157/): Cross-site scripting in Security Access Manager (medium 6.1)
- [CVE-2019-4156](https://insights.sbomify.com/CVE-2019-4156/): Weak cryptography in Security Access Manager (medium 5.9)
- [CVE-2019-4155](https://insights.sbomify.com/CVE-2019-4155/): Privilege escalation in API Connect (high 8.8)
- [CVE-2019-4154](https://insights.sbomify.com/CVE-2019-4154/): Memory corruption in DB2 for Linux, UNIX and Windows (high 8.4)
- [CVE-2019-4153](https://insights.sbomify.com/CVE-2019-4153/): Open redirect in Security Access Manager (medium 6.8)
- [CVE-2019-4152](https://insights.sbomify.com/CVE-2019-4152/): Auth bypass in Security Access Manager (medium 5.1)
- [CVE-2019-4151](https://insights.sbomify.com/CVE-2019-4151/): Weak cryptography in Security Access Manager (medium 5.9)
- [CVE-2019-4150](https://insights.sbomify.com/CVE-2019-4150/): Security feature bypass in Security Access Manager (low 3.7)
- [CVE-2019-4149](https://insights.sbomify.com/CVE-2019-4149/): Cross-site scripting in Business Automation Workflow (medium 5.4)
- [CVE-2019-4148](https://insights.sbomify.com/CVE-2019-4148/): Cross-site scripting in Sterling B2B Integrator (medium 4.0)
- [CVE-2019-4147](https://insights.sbomify.com/CVE-2019-4147/): SQL injection in Sterling File Gateway (medium 4.7)
- [CVE-2019-4146](https://insights.sbomify.com/CVE-2019-4146/): Information disclosure in Sterling B2B Integrator (low 3.1)
- [CVE-2019-4145](https://insights.sbomify.com/CVE-2019-4145/): Information disclosure in Security Access Manager (high 7.7)
- [CVE-2019-4143](https://insights.sbomify.com/CVE-2019-4143/): Information disclosure in Cloud Private (medium 5.5)
- [CVE-2019-4142](https://insights.sbomify.com/CVE-2019-4142/): Cross-site request forgery in Cloud Private (medium 4.3)
- [CVE-2019-4141](https://insights.sbomify.com/CVE-2019-4141/): Denial of service in MQ (medium 5.3)
- [CVE-2019-4140](https://insights.sbomify.com/CVE-2019-4140/): Information disclosure in Spectrum Protect (medium 6.3)
- [CVE-2019-4139](https://insights.sbomify.com/CVE-2019-4139/): Cross-site scripting in Cognos Analytics (medium 5.4)
- [CVE-2019-4138](https://insights.sbomify.com/CVE-2019-4138/): Misconfiguration in Spectrum Control Standard Edition (medium 5.9)
- [CVE-2019-4137](https://insights.sbomify.com/CVE-2019-4137/): Cross-site scripting in Spectrum Control Standard Edition (medium 6.1)
- [CVE-2019-4136](https://insights.sbomify.com/CVE-2019-4136/): Cross-site scripting in Cognos Controller (medium 5.4)
- [CVE-2019-4135](https://insights.sbomify.com/CVE-2019-4135/): Auth bypass in Security Access Manager (high 7.5)
- [CVE-2019-4134](https://insights.sbomify.com/CVE-2019-4134/): Cross-site scripting in Planning Analytics Local (medium 6.1)
- [CVE-2019-4133](https://insights.sbomify.com/CVE-2019-4133/): Code injection in Cloud Automation Manager (medium 5.0)
- [CVE-2019-4132](https://insights.sbomify.com/CVE-2019-4132/): Information disclosure in Cloud Automation Manager (medium 4.0)
- [CVE-2019-4131](https://insights.sbomify.com/CVE-2019-4131/): Server-side request forgery in Monitoring (medium 5.3)
- [CVE-2019-4130](https://insights.sbomify.com/CVE-2019-4130/): File upload in Cloud Pak System (critical 9.0)
- [CVE-2019-4129](https://insights.sbomify.com/CVE-2019-4129/): Information disclosure in Spectrum Protect (low 3.1)
- [CVE-2019-4120](https://insights.sbomify.com/CVE-2019-4120/): Cross-site scripting in Cloud Private (medium 5.4)
- [CVE-2019-4119](https://insights.sbomify.com/CVE-2019-4119/): Server-side request forgery in Cloud Private (low 3.1)
- [CVE-2019-4118](https://insights.sbomify.com/CVE-2019-4118/): Information disclosure in Multicloud Manager (medium 4.4)
- [CVE-2019-4117](https://insights.sbomify.com/CVE-2019-4117/): Cross-site request forgery in Cloud Private (medium 4.3)
- [CVE-2019-4116](https://insights.sbomify.com/CVE-2019-4116/): Information disclosure in Cloud Private (medium 5.5)
- [CVE-2019-4115](https://insights.sbomify.com/CVE-2019-4115/): Cross-site scripting in WebSphere eXtreme Scale (medium 5.4)
- [CVE-2019-4112](https://insights.sbomify.com/CVE-2019-4112/): Information disclosure in WebSphere eXtreme Scale (medium 4.0)
- [CVE-2019-4109](https://insights.sbomify.com/CVE-2019-4109/): Other in WebSphere eXtreme Scale (medium 6.1)
- [CVE-2019-4106](https://insights.sbomify.com/CVE-2019-4106/): Cross-site scripting in WebSphere eXtreme Scale (medium 4.8)
- [CVE-2019-4103](https://insights.sbomify.com/CVE-2019-4103/): Command injection in Tivoli Netcool/Impact (high 8.0)
- [CVE-2019-4102](https://insights.sbomify.com/CVE-2019-4102/): Weak cryptography in DB2 for Linux, UNIX and Windows (medium 5.9)
- [CVE-2019-4101](https://insights.sbomify.com/CVE-2019-4101/): Denial of service in DB2 for Linux, UNIX and Windows (medium 6.2)
- [CVE-2019-4098](https://insights.sbomify.com/CVE-2019-4098/): Cross-site scripting in Cloud Pak System (medium 5.4)
- [CVE-2019-4095](https://insights.sbomify.com/CVE-2019-4095/): Cross-site request forgery in Cloud Pak System (medium 5.3)
- [CVE-2019-4094](https://insights.sbomify.com/CVE-2019-4094/): Privilege escalation in DB2 for Linux, UNIX and Windows (high 8.4)
- [CVE-2019-4093](https://insights.sbomify.com/CVE-2019-4093/): Misconfiguration in Spectrum Protect (medium 5.1)
- [CVE-2019-4092](https://insights.sbomify.com/CVE-2019-4092/): Open redirect in Content Navigator (medium 6.8)
- [CVE-2019-4091](https://insights.sbomify.com/CVE-2019-4091/): Cross-site scripting in "HCL Marketing Platform" (medium 5.4)
- [CVE-2019-4090](https://insights.sbomify.com/CVE-2019-4090/): Cross-site scripting in "HCL Campaign" (medium 5.4)
- [CVE-2019-4088](https://insights.sbomify.com/CVE-2019-4088/): Privilege escalation in Spectrum Protect (high 7.4)
- [CVE-2019-4087](https://insights.sbomify.com/CVE-2019-4087/): Memory corruption in Spectrum Protect (critical 9.8)
- [CVE-2019-4086](https://insights.sbomify.com/CVE-2019-4086/): Other in Cloud Application Performance Management (medium 6.1)
- [CVE-2019-4084](https://insights.sbomify.com/CVE-2019-4084/): Information disclosure in Rational Collaborative Lifecycle Management (medium 4.3)
- [CVE-2019-4083](https://insights.sbomify.com/CVE-2019-4083/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2019-4080](https://insights.sbomify.com/CVE-2019-4080/): Denial of service in WebSphere Application Server (medium 6.5)
- [CVE-2019-4078](https://insights.sbomify.com/CVE-2019-4078/): Misconfiguration in MQ (high 7.4)
- [CVE-2019-4077](https://insights.sbomify.com/CVE-2019-4077/): Cross-site scripting in Sterling B2B Integrator (medium 5.4)
- [CVE-2019-4076](https://insights.sbomify.com/CVE-2019-4076/): Cross-site scripting in Sterling B2B Integrator (medium 5.4)
- [CVE-2019-4075](https://insights.sbomify.com/CVE-2019-4075/): Cross-site scripting in Sterling B2B Integrator (medium 5.4)
- [CVE-2019-4074](https://insights.sbomify.com/CVE-2019-4074/): Cross-site scripting in Sterling B2B Integrator (medium 5.4)
- [CVE-2019-4073](https://insights.sbomify.com/CVE-2019-4073/): Cross-site scripting in Sterling B2B Integrator (medium 5.4)
- [CVE-2019-4072](https://insights.sbomify.com/CVE-2019-4072/): Auth bypass in Spectrum Control Standard Edition (medium 4.7)
- [CVE-2019-4071](https://insights.sbomify.com/CVE-2019-4071/): Code injection in Spectrum Control Standard Edition (medium 6.8)
- [CVE-2019-4070](https://insights.sbomify.com/CVE-2019-4070/): Cross-site scripting in Intelligent Operations Center (medium 5.4)
- [CVE-2019-4069](https://insights.sbomify.com/CVE-2019-4069/): File upload in Intelligent Operations Center (high 8.0)
- [CVE-2019-4068](https://insights.sbomify.com/CVE-2019-4068/): Information disclosure in Intelligent Operations Center (medium 5.9)
- [CVE-2019-4067](https://insights.sbomify.com/CVE-2019-4067/): Misconfiguration in Intelligent Operations Center (medium 5.9)
- [CVE-2019-4066](https://insights.sbomify.com/CVE-2019-4066/): Missing authorization in Intelligent Operations Center (high 8.8)
- [CVE-2019-4063](https://insights.sbomify.com/CVE-2019-4063/): Information disclosure in Sterling B2B Integrator (medium 5.9)
- [CVE-2019-4062](https://insights.sbomify.com/CVE-2019-4062/): XML external entity in i2 Analyst's Notebook (high 7.1)
- [CVE-2019-4061](https://insights.sbomify.com/CVE-2019-4061/): Information disclosure in BigFix Platform (medium 5.3)
- [CVE-2019-4059](https://insights.sbomify.com/CVE-2019-4059/): Information disclosure in Rational ClearCase (high 7.5)
- [CVE-2019-4058](https://insights.sbomify.com/CVE-2019-4058/): Information disclosure in BigFix Platform (medium 6.5)
- [CVE-2019-4057](https://insights.sbomify.com/CVE-2019-4057/): Privilege escalation in DB2 for Linux, UNIX and Windows (medium 6.7)
- [CVE-2019-4056](https://insights.sbomify.com/CVE-2019-4056/): File upload in Maximo Asset Management (medium 4.3)
- [CVE-2019-4055](https://insights.sbomify.com/CVE-2019-4055/): Denial of service in MQ (high 7.5)
- [CVE-2019-4054](https://insights.sbomify.com/CVE-2019-4054/): Information disclosure in QRadar SIEM (medium 4.0)
- [CVE-2019-4052](https://insights.sbomify.com/CVE-2019-4052/): Information disclosure in API Connect (high 8.2)
- [CVE-2019-4051](https://insights.sbomify.com/CVE-2019-4051/): Information disclosure in API Connect (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/45/