# Vulnerabilities published in 2020 - [CVE-2020-4848](https://insights.sbomify.com/CVE-2020-4848/): Missing authorization in UrbanCode Deploy (medium 5.4) - [CVE-2020-4846](https://insights.sbomify.com/CVE-2020-4846/): Information disclosure in Security Key Lifecycle Manager (low 2.7) - [CVE-2020-4845](https://insights.sbomify.com/CVE-2020-4845/): Cross-site scripting in Security Key Lifecycle Manager (medium 5.4) - [CVE-2020-4843](https://insights.sbomify.com/CVE-2020-4843/): Information disclosure in Security Secret Server (medium 6.3) - [CVE-2020-4842](https://insights.sbomify.com/CVE-2020-4842/): Information disclosure in Security Secret Server (low 2.7) - [CVE-2020-4841](https://insights.sbomify.com/CVE-2020-4841/): Misconfiguration in Security Secret Server (medium 5.9) - [CVE-2020-4840](https://insights.sbomify.com/CVE-2020-4840/): Open redirect in Security Secret Server (high 7.4) - [CVE-2020-4839](https://insights.sbomify.com/CVE-2020-4839/): Memory corruption in 8335-GCA (medium 4.9) - [CVE-2020-4838](https://insights.sbomify.com/CVE-2020-4838/): Cross-site scripting in API Connect (medium 6.4) - [CVE-2020-4832](https://insights.sbomify.com/CVE-2020-4832/): Information disclosure in PowerHA (medium 6.2) - [CVE-2020-4831](https://insights.sbomify.com/CVE-2020-4831/): Weak cryptography in DataPower Gateway (medium 5.9) - [CVE-2020-4829](https://insights.sbomify.com/CVE-2020-4829/): Privilege escalation in AIX (high 8.4) - [CVE-2020-4828](https://insights.sbomify.com/CVE-2020-4828/): Other in API Connect (medium 6.5) - [CVE-2020-4827](https://insights.sbomify.com/CVE-2020-4827/): Cross-site request forgery in API Connect (medium 4.3) - [CVE-2020-4826](https://insights.sbomify.com/CVE-2020-4826/): Cross-site request forgery in API Connect (medium 4.3) - [CVE-2020-4825](https://insights.sbomify.com/CVE-2020-4825/): Cross-site scripting in API Connect (medium 5.4) - [CVE-2020-4821](https://insights.sbomify.com/CVE-2020-4821/): Auth bypass in InfoSphere Change Data Capture for z/OS (medium 5.9) - [CVE-2020-4820](https://insights.sbomify.com/CVE-2020-4820/): Cross-site scripting in Cloud Pak for Security (medium 6.1) - [CVE-2020-4816](https://insights.sbomify.com/CVE-2020-4816/): Misconfiguration in Cloud Pak for Security (medium 5.3) - [CVE-2020-4815](https://insights.sbomify.com/CVE-2020-4815/): Information disclosure in Cloud Pak for Security (medium 5.3) - [CVE-2020-4811](https://insights.sbomify.com/CVE-2020-4811/): Other in Cloud Pak for Security (low 2.4) - [CVE-2020-4809](https://insights.sbomify.com/CVE-2020-4809/): Information disclosure in Edge (medium 4.0) - [CVE-2020-4805](https://insights.sbomify.com/CVE-2020-4805/): Information disclosure in Edge (medium 4.0) - [CVE-2020-4803](https://insights.sbomify.com/CVE-2020-4803/): Information disclosure in Edge (medium 4.0) - [CVE-2020-4799](https://insights.sbomify.com/CVE-2020-4799/): Memory corruption in Informix Dynamic Server (high 7.8) - [CVE-2020-4795](https://insights.sbomify.com/CVE-2020-4795/): Information disclosure in Security Identity Governance and Intelligence (medium 5.3) - [CVE-2020-4794](https://insights.sbomify.com/CVE-2020-4794/): Missing authorization in Automation Workstream Services (medium 5.4) - [CVE-2020-4792](https://insights.sbomify.com/CVE-2020-4792/): Cross-site scripting in Edge (medium 5.4) - [CVE-2020-4791](https://insights.sbomify.com/CVE-2020-4791/): Weak cryptography in Security Identity Governance and Intelligence (medium 6.9) - [CVE-2020-4790](https://insights.sbomify.com/CVE-2020-4790/): Denial of service in Security Identity Governance and Intelligence (medium 5.3) - [CVE-2020-4789](https://insights.sbomify.com/CVE-2020-4789/): Path traversal in QRadar SIEM (medium 6.5) - [CVE-2020-4788](https://insights.sbomify.com/CVE-2020-4788/): Information disclosure in AIX (medium 5.1) - [CVE-2020-4787](https://insights.sbomify.com/CVE-2020-4787/): Server-side request forgery in QRadar SIEM (medium 4.2) - [CVE-2020-4786](https://insights.sbomify.com/CVE-2020-4786/): Server-side request forgery in QRadar SIEM (medium 5.4) - [CVE-2020-4785](https://insights.sbomify.com/CVE-2020-4785/): Other in App Connect Enterprise Certified Container (medium 5.4) - [CVE-2020-4783](https://insights.sbomify.com/CVE-2020-4783/): Misconfiguration in Spectrum Protect Plus (medium 5.9) - [CVE-2020-4782](https://insights.sbomify.com/CVE-2020-4782/): Path traversal in WebSphere Application Server (medium 6.5) - [CVE-2020-4781](https://insights.sbomify.com/CVE-2020-4781/): Denial of service in Curam SPM (medium 6.5) - [CVE-2020-4780](https://insights.sbomify.com/CVE-2020-4780/): Misconfiguration in Curam SPM (medium 4.3) - [CVE-2020-4779](https://insights.sbomify.com/CVE-2020-4779/): Auth bypass in Curam SPM (high 8.1) - [CVE-2020-4778](https://insights.sbomify.com/CVE-2020-4778/): Weak cryptography in Curam SPM (medium 5.9) - [CVE-2020-4776](https://insights.sbomify.com/CVE-2020-4776/): Path traversal in Curam SPM (medium 5.3) - [CVE-2020-4775](https://insights.sbomify.com/CVE-2020-4775/): Cross-site scripting in Curam SPM (medium 5.4) - [CVE-2020-4774](https://insights.sbomify.com/CVE-2020-4774/): XML external entity in Curam SPM (medium 5.4) - [CVE-2020-4773](https://insights.sbomify.com/CVE-2020-4773/): Cross-site request forgery in Curam SPM (medium 6.5) - [CVE-2020-4772](https://insights.sbomify.com/CVE-2020-4772/): XML external entity in Curam SPM (high 7.1) - [CVE-2020-4771](https://insights.sbomify.com/CVE-2020-4771/): Auth bypass in Spectrum Protect Operations Center (medium 5.3) - [CVE-2020-4768](https://insights.sbomify.com/CVE-2020-4768/): Cross-site scripting in Business Automation Workflow (medium 4.4) - [CVE-2020-4767](https://insights.sbomify.com/CVE-2020-4767/): Memory corruption in Sterling Connect Direct for Microsoft Windows (high 7.5) - [CVE-2020-4766](https://insights.sbomify.com/CVE-2020-4766/): Denial of service in MQ Internet Pass-Thru (medium 5.9) - [CVE-2020-4765](https://insights.sbomify.com/CVE-2020-4765/): Information disclosure in Cloud Pak for Multicloud Management (medium 4.0) - [CVE-2020-4764](https://insights.sbomify.com/CVE-2020-4764/): Cross-site request forgery in Planning Analytics (medium 4.3) - [CVE-2020-4763](https://insights.sbomify.com/CVE-2020-4763/): Information disclosure in Sterling File Gateway (medium 4.3) - [CVE-2020-4762](https://insights.sbomify.com/CVE-2020-4762/): Privilege escalation in Sterling B2B Integrator (high 8.8) - [CVE-2020-4761](https://insights.sbomify.com/CVE-2020-4761/): Information disclosure in Sterling B2B Integrator (medium 5.3) - [CVE-2020-4760](https://insights.sbomify.com/CVE-2020-4760/): Cross-site scripting in Content Navigator (medium 5.4) - [CVE-2020-4759](https://insights.sbomify.com/CVE-2020-4759/): Code injection in FileNet Content Manager (high 7.0) - [CVE-2020-4757](https://insights.sbomify.com/CVE-2020-4757/): Cross-site scripting in Content Navigator (medium 6.4) - [CVE-2020-4756](https://insights.sbomify.com/CVE-2020-4756/): Denial of service in Elastic Storage Server (medium 6.2) - [CVE-2020-4755](https://insights.sbomify.com/CVE-2020-4755/): Cross-site scripting in Spectrum Scale (medium 5.4) - [CVE-2020-4749](https://insights.sbomify.com/CVE-2020-4749/): Information disclosure in Spectrum Scale (medium 4.3) - [CVE-2020-4748](https://insights.sbomify.com/CVE-2020-4748/): Cross-site scripting in Spectrum Scale (medium 6.1) - [CVE-2020-4747](https://insights.sbomify.com/CVE-2020-4747/): Auth bypass in Sterling Connect:Direct for UNIX (high 7.4) - [CVE-2020-4741](https://insights.sbomify.com/CVE-2020-4741/): Cross-site scripting in InfoSphere Information Server (medium 6.4) - [CVE-2020-4740](https://insights.sbomify.com/CVE-2020-4740/): Cross-site scripting in InfoSphere Information Server (medium 5.2) - [CVE-2020-4739](https://insights.sbomify.com/CVE-2020-4739/): Other in DB2 for Linux, UNIX and Windows (high 7.8) - [CVE-2020-4733](https://insights.sbomify.com/CVE-2020-4733/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4) - [CVE-2020-4732](https://insights.sbomify.com/CVE-2020-4732/): Missing authorization in Engineering Lifecycle Optimization (medium 4.3) - [CVE-2020-4731](https://insights.sbomify.com/CVE-2020-4731/): Cross-site scripting in Aspera Shares (medium 6.1) - [CVE-2020-4729](https://insights.sbomify.com/CVE-2020-4729/): IBM Safer Payments denial of service (medium 5.3) - [CVE-2020-4727](https://insights.sbomify.com/CVE-2020-4727/): Other in InfoSphere Information Server (medium 6.1) - [CVE-2020-4726](https://insights.sbomify.com/CVE-2020-4726/): Information disclosure in Cloud APM (medium 4.0) - [CVE-2020-4725](https://insights.sbomify.com/CVE-2020-4725/): Other in Cloud APM (medium 4.3) - [CVE-2020-4724](https://insights.sbomify.com/CVE-2020-4724/): Memory corruption in i2 Analyst Notebook (high 7.8) - [CVE-2020-4723](https://insights.sbomify.com/CVE-2020-4723/): Memory corruption in i2 Analyst Notebook (high 7.8) - [CVE-2020-4722](https://insights.sbomify.com/CVE-2020-4722/): Memory corruption in i2 Analyst Notebook (high 7.8) - [CVE-2020-4721](https://insights.sbomify.com/CVE-2020-4721/): Memory corruption in i2 Analyst Notebook (high 7.8) - [CVE-2020-4719](https://insights.sbomify.com/CVE-2020-4719/): Server-side request forgery in Cloud APM (medium 4.9) - [CVE-2020-4718](https://insights.sbomify.com/CVE-2020-4718/): Cross-site scripting in Jazz Reporting Service (medium 6.4) - [CVE-2020-4717](https://insights.sbomify.com/CVE-2020-4717/): Path traversal in SPSS Modeler (medium 6.2) - [CVE-2020-4711](https://insights.sbomify.com/CVE-2020-4711/): Path traversal in Spectrum Protect Plus (medium 6.5) - [CVE-2020-4708](https://insights.sbomify.com/CVE-2020-4708/): Misconfiguration in Security Trusteer Pinpoint Detect (low 3.7) - [CVE-2020-4707](https://insights.sbomify.com/CVE-2020-4707/): Cross-site scripting in API Connect (medium 5.4) - [CVE-2020-4706](https://insights.sbomify.com/CVE-2020-4706/): Cross-site scripting in API Connect (medium 5.4) - [CVE-2020-4705](https://insights.sbomify.com/CVE-2020-4705/): Cross-site scripting in Sterling B2B Integrator (medium 4.8) - [CVE-2020-4704](https://insights.sbomify.com/CVE-2020-4704/): Cross-site scripting in Content Navigator (medium 6.4) - [CVE-2020-4703](https://insights.sbomify.com/CVE-2020-4703/): File upload in Spectrum Protect Plus (high 8.0) - [CVE-2020-4702](https://insights.sbomify.com/CVE-2020-4702/): Cross-site scripting in InfoSphere Information Server (medium 6.4) - [CVE-2020-4701](https://insights.sbomify.com/CVE-2020-4701/): Memory corruption in DB2 for Linux, UNIX and Windows (high 8.4) - [CVE-2020-4700](https://insights.sbomify.com/CVE-2020-4700/): Privilege escalation in Sterling B2B Integrator (high 7.5) - [CVE-2020-4699](https://insights.sbomify.com/CVE-2020-4699/): Information disclosure in Security Access Manager (medium 5.3) - [CVE-2020-4698](https://insights.sbomify.com/CVE-2020-4698/): Cross-site scripting in Business Automation Workflow (medium 6.4) - [CVE-2020-4697](https://insights.sbomify.com/CVE-2020-4697/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4) - [CVE-2020-4696](https://insights.sbomify.com/CVE-2020-4696/): Auth bypass in Cloud Pak for Security (medium 5.3) - [CVE-2020-4695](https://insights.sbomify.com/CVE-2020-4695/): Information disclosure in API Connect (medium 5.9) - [CVE-2020-4693](https://insights.sbomify.com/CVE-2020-4693/): Code injection in Spectrum Protect Operations Center (critical 9.1) - [CVE-2020-4692](https://insights.sbomify.com/CVE-2020-4692/): Information disclosure in Sterling B2B Integrator (medium 4.3) - [CVE-2020-4691](https://insights.sbomify.com/CVE-2020-4691/): Cross-site scripting in Engineering Lifecycle Optimization (medium 4.6) - [CVE-2020-4690](https://insights.sbomify.com/CVE-2020-4690/): Hardcoded credentials in Security Guardium (high 7.5) - [CVE-2020-4689](https://insights.sbomify.com/CVE-2020-4689/): Code injection in Security Guardium (medium 6.8) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/59/