# Vulnerabilities published in 2020 - [CVE-2020-4985](https://insights.sbomify.com/CVE-2020-4985/): Information disclosure in Planning Analytics Local (low 3.7) - [CVE-2020-4983](https://insights.sbomify.com/CVE-2020-4983/): Command injection in Spectrum LSF (high 7.4) - [CVE-2020-4981](https://insights.sbomify.com/CVE-2020-4981/): Other in Spectrum Scale (medium 4.4) - [CVE-2020-4980](https://insights.sbomify.com/CVE-2020-4980/): Weak cryptography in QRadar (medium 5.3) - [CVE-2020-4979](https://insights.sbomify.com/CVE-2020-4979/): Command injection in QRadar SIEM (high 7.5) - [CVE-2020-4977](https://insights.sbomify.com/CVE-2020-4977/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4) - [CVE-2020-4976](https://insights.sbomify.com/CVE-2020-4976/): Misconfiguration in DB2 for Linux, UNIX and Windows (medium 5.1) - [CVE-2020-4975](https://insights.sbomify.com/CVE-2020-4975/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4) - [CVE-2020-4974](https://insights.sbomify.com/CVE-2020-4974/): Server-side request forgery in Engineering Lifecycle Optimization (medium 6.3) - [CVE-2020-4970](https://insights.sbomify.com/CVE-2020-4970/): Misconfiguration in Security Identity Governance and Intelligence (medium 5.3) - [CVE-2020-4969](https://insights.sbomify.com/CVE-2020-4969/): Misconfiguration in Security Identity Governance and Intelligence (low 2.6) - [CVE-2020-4968](https://insights.sbomify.com/CVE-2020-4968/): Weak cryptography in Security Identity Governance and Intelligence (medium 5.3) - [CVE-2020-4967](https://insights.sbomify.com/CVE-2020-4967/): Information disclosure in Cloud Pak for Security (low 3.1) - [CVE-2020-4966](https://insights.sbomify.com/CVE-2020-4966/): Information disclosure in Security Identity Governance and Intelligence (medium 4.3) - [CVE-2020-4965](https://insights.sbomify.com/CVE-2020-4965/): Weak cryptography in Engineering Lifecycle Optimization (medium 5.9) - [CVE-2020-4964](https://insights.sbomify.com/CVE-2020-4964/): Other in Engineering Lifecycle Optimization (medium 4.3) - [CVE-2020-4958](https://insights.sbomify.com/CVE-2020-4958/): Missing authorization in Security Identity Governance and Intelligence (high 7.4) - [CVE-2020-4957](https://insights.sbomify.com/CVE-2020-4957/): Information disclosure in Security Identity Governance and Intelligence (medium 5.3) - [CVE-2020-4956](https://insights.sbomify.com/CVE-2020-4956/): Denial of service in Spectrum Protect Operations Center (medium 4.8) - [CVE-2020-4955](https://insights.sbomify.com/CVE-2020-4955/): File upload in Spectrum Protect Operations Center (high 8.0) - [CVE-2020-4954](https://insights.sbomify.com/CVE-2020-4954/): Auth bypass in Spectrum Protect Operations Center (medium 4.2) - [CVE-2020-4953](https://insights.sbomify.com/CVE-2020-4953/): Information disclosure in Planning Analytics (medium 4.3) - [CVE-2020-4952](https://insights.sbomify.com/CVE-2020-4952/): Privilege escalation in Security Guardium (high 8.8) - [CVE-2020-4951](https://insights.sbomify.com/CVE-2020-4951/): Information disclosure in Cognos Analytics (medium 4.0) - [CVE-2020-4949](https://insights.sbomify.com/CVE-2020-4949/): XML external entity in WebSphere Application Server (high 8.2) - [CVE-2020-4945](https://insights.sbomify.com/CVE-2020-4945/): Misconfiguration in DB2 for Linux and UNIX (medium 6.5) - [CVE-2020-4944](https://insights.sbomify.com/CVE-2020-4944/): Information disclosure in UrbanCode Deploy (medium 5.1) - [CVE-2020-4942](https://insights.sbomify.com/CVE-2020-4942/): Cross-site request forgery in Curam SPM (medium 6.5) - [CVE-2020-4941](https://insights.sbomify.com/CVE-2020-4941/): Information disclosure in Edge (medium 4.3) - [CVE-2020-4938](https://insights.sbomify.com/CVE-2020-4938/): Cross-site request forgery in MQ Appliance (medium 4.3) - [CVE-2020-4937](https://insights.sbomify.com/CVE-2020-4937/): Weak cryptography in Sterling B2B Integrator (medium 5.9) - [CVE-2020-4935](https://insights.sbomify.com/CVE-2020-4935/): Cross-site scripting in Datacap Navigator (medium 5.4) - [CVE-2020-4934](https://insights.sbomify.com/CVE-2020-4934/): Path traversal in Content Navigator (medium 4.3) - [CVE-2020-4933](https://insights.sbomify.com/CVE-2020-4933/): Cross-site scripting in Jazz Reporting Service (medium 5.4) - [CVE-2020-4932](https://insights.sbomify.com/CVE-2020-4932/): Hardcoded credentials in QRadar SIEM (medium 6.2) - [CVE-2020-4931](https://insights.sbomify.com/CVE-2020-4931/): Denial of service in MQ Appliance (medium 6.5) - [CVE-2020-4929](https://insights.sbomify.com/CVE-2020-4929/): Cross-site scripting in QRadar SIEM (medium 5.4) - [CVE-2020-4928](https://insights.sbomify.com/CVE-2020-4928/): File upload in Cloud Pak System (medium 6.7) - [CVE-2020-4927](https://insights.sbomify.com/CVE-2020-4927/): IBM Spectrum Scale information disclosure (medium 5.7) - [CVE-2020-4926](https://insights.sbomify.com/CVE-2020-4926/): Missing authorization in Elastic Storage System (medium 5.7) - [CVE-2020-4925](https://insights.sbomify.com/CVE-2020-4925/): Denial of service in Spectrum Scale (medium 6.2) - [CVE-2020-4921](https://insights.sbomify.com/CVE-2020-4921/): SQL injection in Security Guardium (high 7.6) - [CVE-2020-4920](https://insights.sbomify.com/CVE-2020-4920/): Cross-site scripting in Engineering Lifecycle Optimization (medium 6.4) - [CVE-2020-4919](https://insights.sbomify.com/CVE-2020-4919/): Auth bypass in Cloud Pak System (medium 4.7) - [CVE-2020-4918](https://insights.sbomify.com/CVE-2020-4918/): Missing authorization in Cloud Pak System (low 2.3) - [CVE-2020-4917](https://insights.sbomify.com/CVE-2020-4917/): Cross-site request forgery in Cloud Pak System (medium 4.3) - [CVE-2020-4916](https://insights.sbomify.com/CVE-2020-4916/): Cross-site scripting in Cloud Pak System (medium 5.5) - [CVE-2020-4914](https://insights.sbomify.com/CVE-2020-4914/): IBM Cloud Pak System Software Suite session fixation (medium 4.2) - [CVE-2020-4913](https://insights.sbomify.com/CVE-2020-4913/): Information disclosure in Cloud Pak System (medium 4.4) - [CVE-2020-4912](https://insights.sbomify.com/CVE-2020-4912/): Privilege escalation in Cloud Pak System (medium 4.7) - [CVE-2020-4910](https://insights.sbomify.com/CVE-2020-4910/): Cross-site scripting in Cloud Pak System (medium 4.8) - [CVE-2020-4909](https://insights.sbomify.com/CVE-2020-4909/): Cross-site scripting in Cloud Pak System (medium 4.8) - [CVE-2020-4908](https://insights.sbomify.com/CVE-2020-4908/): Information disclosure in Financial Transaction Manager (medium 5.3) - [CVE-2020-4907](https://insights.sbomify.com/CVE-2020-4907/): Information disclosure in Financial Transaction Manager (medium 5.3) - [CVE-2020-4906](https://insights.sbomify.com/CVE-2020-4906/): Information disclosure in Financial Transaction Manager (medium 4.0) - [CVE-2020-4905](https://insights.sbomify.com/CVE-2020-4905/): Weak cryptography in Financial Transaction Manager (medium 5.9) - [CVE-2020-4904](https://insights.sbomify.com/CVE-2020-4904/): Cross-site request forgery in Financial Transaction Manager (medium 4.3) - [CVE-2020-4903](https://insights.sbomify.com/CVE-2020-4903/): Auth bypass in API Connect (medium 4.8) - [CVE-2020-4902](https://insights.sbomify.com/CVE-2020-4902/): SQL injection in Datacap Navigator (medium 6.3) - [CVE-2020-4901](https://insights.sbomify.com/CVE-2020-4901/): Information disclosure in Robotic Process Automation with Automation Anywhere (medium 5.4) - [CVE-2020-4900](https://insights.sbomify.com/CVE-2020-4900/): Information disclosure in Business Automation Workflow (medium 5.1) - [CVE-2020-4899](https://insights.sbomify.com/CVE-2020-4899/): Information disclosure in API Connect (high 7.4) - [CVE-2020-4898](https://insights.sbomify.com/CVE-2020-4898/): Weak cryptography in Emptoris Strategic Supply Management (medium 5.9) - [CVE-2020-4897](https://insights.sbomify.com/CVE-2020-4897/): Information disclosure in Emptoris Contract Management (medium 5.3) - [CVE-2020-4896](https://insights.sbomify.com/CVE-2020-4896/): Other in Emptoris Sourcing (medium 6.5) - [CVE-2020-4895](https://insights.sbomify.com/CVE-2020-4895/): Cross-site scripting in Emptoris Sourcing (medium 6.4) - [CVE-2020-4893](https://insights.sbomify.com/CVE-2020-4893/): Information disclosure in Emptoris Strategic Supply Management (medium 5.9) - [CVE-2020-4892](https://insights.sbomify.com/CVE-2020-4892/): Cross-site scripting in Emptoris Contract Management (medium 5.4) - [CVE-2020-4891](https://insights.sbomify.com/CVE-2020-4891/): Auth bypass in Spectrum Scale (medium 6.2) - [CVE-2020-4890](https://insights.sbomify.com/CVE-2020-4890/): Denial of service in Spectrum Scale (medium 4.4) - [CVE-2020-4889](https://insights.sbomify.com/CVE-2020-4889/): Other in Spectrum Scale (medium 4.0) - [CVE-2020-4888](https://insights.sbomify.com/CVE-2020-4888/): Deserialization in QRadar SIEM (medium 6.3) - [CVE-2020-4887](https://insights.sbomify.com/CVE-2020-4887/): Path traversal in AIX (medium 6.2) - [CVE-2020-4886](https://insights.sbomify.com/CVE-2020-4886/): Information disclosure in InfoSphere Information Server (medium 4.0) - [CVE-2020-4885](https://insights.sbomify.com/CVE-2020-4885/): Race condition in DB2 for Linux and UNIX (medium 6.2) - [CVE-2020-4884](https://insights.sbomify.com/CVE-2020-4884/): Information disclosure in UrbanCode Deploy (medium 6.2) - [CVE-2020-4883](https://insights.sbomify.com/CVE-2020-4883/): Information disclosure in QRadar SIEM (medium 4.3) - [CVE-2020-4882](https://insights.sbomify.com/CVE-2020-4882/): Server-side request forgery in Planning Analytics (medium 6.1) - [CVE-2020-4881](https://insights.sbomify.com/CVE-2020-4881/): Weak cryptography in Planning Analytics (medium 5.9) - [CVE-2020-4879](https://insights.sbomify.com/CVE-2020-4879/): Auth bypass in Cognos Controller (high 7.3) - [CVE-2020-4877](https://insights.sbomify.com/CVE-2020-4877/): Missing authorization in Cognos Controller (high 7.3) - [CVE-2020-4876](https://insights.sbomify.com/CVE-2020-4876/): XML external entity in Cognos Controller (high 7.1) - [CVE-2020-4875](https://insights.sbomify.com/CVE-2020-4875/): XML external entity in Cognos Controller (high 7.1) - [CVE-2020-4874](https://insights.sbomify.com/CVE-2020-4874/): IBM Cognos Controller information disclosure (medium 5.9) - [CVE-2020-4873](https://insights.sbomify.com/CVE-2020-4873/): Misconfiguration in Planning Analytics (medium 5.3) - [CVE-2020-4871](https://insights.sbomify.com/CVE-2020-4871/): Information disclosure in Planning Analytics (medium 4.0) - [CVE-2020-4870](https://insights.sbomify.com/CVE-2020-4870/): Denial of service in MQ (medium 5.9) - [CVE-2020-4869](https://insights.sbomify.com/CVE-2020-4869/): Memory corruption in MQ Appliance (medium 5.3) - [CVE-2020-4868](https://insights.sbomify.com/CVE-2020-4868/): IBM TRIRIGA information disclosure (medium 4.3) - [CVE-2020-4866](https://insights.sbomify.com/CVE-2020-4866/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4) - [CVE-2020-4865](https://insights.sbomify.com/CVE-2020-4865/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4) - [CVE-2020-4864](https://insights.sbomify.com/CVE-2020-4864/): Auth bypass in Resilient OnPrem (medium 4.3) - [CVE-2020-4863](https://insights.sbomify.com/CVE-2020-4863/): Cross-site scripting in Engineering Lifecycle Optimization (medium 6.4) - [CVE-2020-4857](https://insights.sbomify.com/CVE-2020-4857/): Cross-site scripting in Engineering Lifecycle Optimization (medium 6.4) - [CVE-2020-4856](https://insights.sbomify.com/CVE-2020-4856/): Cross-site scripting in Engineering Lifecycle Optimization (medium 6.4) - [CVE-2020-4855](https://insights.sbomify.com/CVE-2020-4855/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4) - [CVE-2020-4854](https://insights.sbomify.com/CVE-2020-4854/): Hardcoded credentials in Spectrum Protect Plus (critical 9.8) - [CVE-2020-4851](https://insights.sbomify.com/CVE-2020-4851/): Other in Spectrum Scale (medium 4.0) - [CVE-2020-4850](https://insights.sbomify.com/CVE-2020-4850/): Information disclosure in Spectrum Scale (medium 4.0) - [CVE-2020-4849](https://insights.sbomify.com/CVE-2020-4849/): Open redirect in Tivoli Netcool Impact (medium 5.3) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/58/