# Vulnerabilities published in 2020


- [CVE-2020-4688](https://insights.sbomify.com/CVE-2020-4688/): Command injection in Security Guardium (medium 5.9)
- [CVE-2020-4687](https://insights.sbomify.com/CVE-2020-4687/): Missing authorization in Content Navigator (medium 4.3)
- [CVE-2020-4686](https://insights.sbomify.com/CVE-2020-4686/): Privilege escalation in SAN Volume Controller and Storwize Family (medium 6.8)
- [CVE-2020-4685](https://insights.sbomify.com/CVE-2020-4685/): Privilege escalation in Cognos Controller (high 8.0)
- [CVE-2020-4682](https://insights.sbomify.com/CVE-2020-4682/): Deserialization in MQ (high 8.1)
- [CVE-2020-4681](https://insights.sbomify.com/CVE-2020-4681/): Cross-site scripting in Security Guardium (medium 5.4)
- [CVE-2020-4680](https://insights.sbomify.com/CVE-2020-4680/): Cross-site scripting in Security Guardium (medium 5.4)
- [CVE-2020-4679](https://insights.sbomify.com/CVE-2020-4679/): Cross-site scripting in Security Guardium (medium 4.8)
- [CVE-2020-4678](https://insights.sbomify.com/CVE-2020-4678/): Information disclosure in Security Guardium (medium 4.9)
- [CVE-2020-4675](https://insights.sbomify.com/CVE-2020-4675/): Cross-site request forgery in InfoSphere Master Data Management (medium 6.5)
- [CVE-2020-4674](https://insights.sbomify.com/CVE-2020-4674/): Information disclosure in Workload Automation (medium 4.3)
- [CVE-2020-4673](https://insights.sbomify.com/CVE-2020-4673/): Information disclosure in Workload Automation (medium 4.3)
- [CVE-2020-4672](https://insights.sbomify.com/CVE-2020-4672/): Cross-site scripting in Business Automation Workflow (medium 5.4)
- [CVE-2020-4671](https://insights.sbomify.com/CVE-2020-4671/): Information disclosure in Sterling B2B Integrator (medium 6.5)
- [CVE-2020-4670](https://insights.sbomify.com/CVE-2020-4670/): Auth bypass in Planning Analytics Local (high 7.4)
- [CVE-2020-4669](https://insights.sbomify.com/CVE-2020-4669/): Missing authorization in Planning Analytics Local (high 7.4)
- [CVE-2020-4668](https://insights.sbomify.com/CVE-2020-4668/): Cross-site request forgery in Sterling B2B Integrator (medium 4.3)
- [CVE-2020-4667](https://insights.sbomify.com/CVE-2020-4667/): Information disclosure in Engineering Requirements Quality Assistant (medium 4.3)
- [CVE-2020-4666](https://insights.sbomify.com/CVE-2020-4666/): Cross-site scripting in Engineering Requirements Quality Assistant (medium 5.4)
- [CVE-2020-4665](https://insights.sbomify.com/CVE-2020-4665/): Information disclosure in Sterling File Gateway (medium 4.3)
- [CVE-2020-4664](https://insights.sbomify.com/CVE-2020-4664/): Cross-site scripting in Engineering Requirements Quality Assistant (medium 5.4)
- [CVE-2020-4663](https://insights.sbomify.com/CVE-2020-4663/): Cross-site scripting in Engineering Requirements Quality Assistant (medium 5.4)
- [CVE-2020-4662](https://insights.sbomify.com/CVE-2020-4662/): Auth bypass in Event Streams (medium 6.5)
- [CVE-2020-4661](https://insights.sbomify.com/CVE-2020-4661/): Information disclosure in Security Access Manager (medium 5.3)
- [CVE-2020-4660](https://insights.sbomify.com/CVE-2020-4660/): Information disclosure in Security Access Manager (medium 5.3)
- [CVE-2020-4658](https://insights.sbomify.com/CVE-2020-4658/): Cross-site scripting in Sterling File Gateway (medium 6.1)
- [CVE-2020-4657](https://insights.sbomify.com/CVE-2020-4657/): Cross-site scripting in Sterling B2B Integrator (medium 6.1)
- [CVE-2020-4655](https://insights.sbomify.com/CVE-2020-4655/): SQL injection in Sterling B2B Integrator (medium 6.3)
- [CVE-2020-4654](https://insights.sbomify.com/CVE-2020-4654/): Missing authorization in Sterling File Gateway (low 3.1)
- [CVE-2020-4653](https://insights.sbomify.com/CVE-2020-4653/): Open redirect in Planning Analytics (medium 6.8)
- [CVE-2020-4651](https://insights.sbomify.com/CVE-2020-4651/): Cross-site request forgery in Maximo Spatial Asset Management (medium 4.8)
- [CVE-2020-4650](https://insights.sbomify.com/CVE-2020-4650/): Information disclosure in Maximo Spatial Asset Management (medium 4.0)
- [CVE-2020-4649](https://insights.sbomify.com/CVE-2020-4649/): Information disclosure in Planning Analytics Local (medium 4.3)
- [CVE-2020-4648](https://insights.sbomify.com/CVE-2020-4648/): Missing authorization in Planning Analytics (medium 6.5)
- [CVE-2020-4647](https://insights.sbomify.com/CVE-2020-4647/): SQL injection in Sterling File Gateway (medium 6.3)
- [CVE-2020-4646](https://insights.sbomify.com/CVE-2020-4646/): Missing authorization in Sterling B2B Integrator (medium 4.3)
- [CVE-2020-4645](https://insights.sbomify.com/CVE-2020-4645/): Cross-site scripting in Planning Analytics (medium 5.4)
- [CVE-2020-4644](https://insights.sbomify.com/CVE-2020-4644/): Other in Planning Analytics (medium 6.1)
- [CVE-2020-4643](https://insights.sbomify.com/CVE-2020-4643/): XML external entity in WebSphere Application Server (high 7.5)
- [CVE-2020-4642](https://insights.sbomify.com/CVE-2020-4642/): Denial of service in DB2 for Linux- UNIX and Windows (medium 6.2)
- [CVE-2020-4640](https://insights.sbomify.com/CVE-2020-4640/): Information disclosure in API Connect (low 3.4)
- [CVE-2020-4638](https://insights.sbomify.com/CVE-2020-4638/): Privilege escalation in API Connect (high 7.2)
- [CVE-2020-4636](https://insights.sbomify.com/CVE-2020-4636/): Command injection in Resilient OnPrem (high 8.2)
- [CVE-2020-4635](https://insights.sbomify.com/CVE-2020-4635/): Information disclosure in Resilient (low 3.7)
- [CVE-2020-4633](https://insights.sbomify.com/CVE-2020-4633/): Code injection in Resilient (medium 6.8)
- [CVE-2020-4632](https://insights.sbomify.com/CVE-2020-4632/): Server-side request forgery in InfoSphere Information Server (medium 5.7)
- [CVE-2020-4631](https://insights.sbomify.com/CVE-2020-4631/): Misconfiguration in Spectrum Protect Plus (medium 5.1)
- [CVE-2020-4629](https://insights.sbomify.com/CVE-2020-4629/): Information disclosure in WebSphere Application Server (low 2.9)
- [CVE-2020-4628](https://insights.sbomify.com/CVE-2020-4628/): Information disclosure in Cloud Pak for Security (medium 5.3)
- [CVE-2020-4627](https://insights.sbomify.com/CVE-2020-4627/): Code injection in Cloud Pak for Security (medium 6.5)
- [CVE-2020-4626](https://insights.sbomify.com/CVE-2020-4626/): Information disclosure in Cloud Pak for Security (medium 5.0)
- [CVE-2020-4625](https://insights.sbomify.com/CVE-2020-4625/): Misconfiguration in Cloud Pak for Security (medium 4.0)
- [CVE-2020-4624](https://insights.sbomify.com/CVE-2020-4624/): Weak cryptography in Cloud Pak for Security (low 3.7)
- [CVE-2020-4623](https://insights.sbomify.com/CVE-2020-4623/): Other in i2 iBase (high 7.7)
- [CVE-2020-4622](https://insights.sbomify.com/CVE-2020-4622/): Hardcoded credentials in Data Risk Manager (medium 5.9)
- [CVE-2020-4621](https://insights.sbomify.com/CVE-2020-4621/): Privilege escalation in Data Risk Manager (high 8.8)
- [CVE-2020-4620](https://insights.sbomify.com/CVE-2020-4620/): File upload in Data Risk Manager (high 8.8)
- [CVE-2020-4619](https://insights.sbomify.com/CVE-2020-4619/): Information disclosure in Data Risk Manager (medium 5.3)
- [CVE-2020-4618](https://insights.sbomify.com/CVE-2020-4618/): Denial of service in Data Risk Manager (medium 5.5)
- [CVE-2020-4617](https://insights.sbomify.com/CVE-2020-4617/): Cross-site request forgery in Data Risk Manager (high 7.1)
- [CVE-2020-4616](https://insights.sbomify.com/CVE-2020-4616/): Information disclosure in Data Risk Manager (medium 5.3)
- [CVE-2020-4615](https://insights.sbomify.com/CVE-2020-4615/): Cross-site scripting in Data Risk Manager (medium 5.4)
- [CVE-2020-4614](https://insights.sbomify.com/CVE-2020-4614/): Weak cryptography in Data Risk Manager (low 3.7)
- [CVE-2020-4613](https://insights.sbomify.com/CVE-2020-4613/): Weak cryptography in Data Risk Manager (medium 5.9)
- [CVE-2020-4612](https://insights.sbomify.com/CVE-2020-4612/): Information disclosure in Data Risk Manager (medium 4.3)
- [CVE-2020-4611](https://insights.sbomify.com/CVE-2020-4611/): Privilege escalation in Data Risk Manager (high 8.8)
- [CVE-2020-4610](https://insights.sbomify.com/CVE-2020-4610/): Other in Security Verify Privilege Manager (high 7.4)
- [CVE-2020-4609](https://insights.sbomify.com/CVE-2020-4609/): Memory corruption in Security Verify Privilege Manager (high 7.4)
- [CVE-2020-4607](https://insights.sbomify.com/CVE-2020-4607/): Security feature bypass in Security Verify Privilege Vault Remote (low 3.3)
- [CVE-2020-4606](https://insights.sbomify.com/CVE-2020-4606/): XML external entity in Security Verify Privilege Manager (medium 5.7)
- [CVE-2020-4604](https://insights.sbomify.com/CVE-2020-4604/): Information disclosure in Security Guardium Insights (medium 4.1)
- [CVE-2020-4603](https://insights.sbomify.com/CVE-2020-4603/): Privilege escalation in Security Guardium Insights (low 3.3)
- [CVE-2020-4602](https://insights.sbomify.com/CVE-2020-4602/): Information disclosure in Security Guardium Insights (medium 4.4)
- [CVE-2020-4600](https://insights.sbomify.com/CVE-2020-4600/): Information disclosure in Security Guardium Insights (medium 5.3)
- [CVE-2020-4599](https://insights.sbomify.com/CVE-2020-4599/): Information disclosure in Security Guardium Insights (medium 5.3)
- [CVE-2020-4598](https://insights.sbomify.com/CVE-2020-4598/): Open redirect in Security Guardium Insights (medium 6.5)
- [CVE-2020-4597](https://insights.sbomify.com/CVE-2020-4597/): Information disclosure in Security Guardium Insights (medium 4.3)
- [CVE-2020-4596](https://insights.sbomify.com/CVE-2020-4596/): Weak cryptography in Security Guardium Insights (medium 5.9)
- [CVE-2020-4595](https://insights.sbomify.com/CVE-2020-4595/): Weak cryptography in Security Guardium Insights (medium 5.9)
- [CVE-2020-4594](https://insights.sbomify.com/CVE-2020-4594/): Weak cryptography in Security Guardium Insights (medium 5.9)
- [CVE-2020-4593](https://insights.sbomify.com/CVE-2020-4593/): Information disclosure in Security Guardium Insights (medium 4.4)
- [CVE-2020-4592](https://insights.sbomify.com/CVE-2020-4592/): Other in MQ Appliance (medium 5.3)
- [CVE-2020-4591](https://insights.sbomify.com/CVE-2020-4591/): Information disclosure in Spectrum Protect Server (low 2.9)
- [CVE-2020-4590](https://insights.sbomify.com/CVE-2020-4590/): Denial of service in WebSphere Application Server Liberty (medium 5.3)
- [CVE-2020-4589](https://insights.sbomify.com/CVE-2020-4589/): Deserialization in WebSphere Application Server (high 8.1)
- [CVE-2020-4588](https://insights.sbomify.com/CVE-2020-4588/): File upload in i2 iBase (high 7.7)
- [CVE-2020-4587](https://insights.sbomify.com/CVE-2020-4587/): Memory corruption in Connect:Direct for UNIX (high 8.4)
- [CVE-2020-4584](https://insights.sbomify.com/CVE-2020-4584/): Information disclosure in i2 iBase (low 3.3)
- [CVE-2020-4581](https://insights.sbomify.com/CVE-2020-4581/): Denial of service in DataPower Gateway (high 7.5)
- [CVE-2020-4580](https://insights.sbomify.com/CVE-2020-4580/): Denial of service in DataPower Gateway (high 7.5)
- [CVE-2020-4579](https://insights.sbomify.com/CVE-2020-4579/): Denial of service in DataPower Gateway (high 7.5)
- [CVE-2020-4578](https://insights.sbomify.com/CVE-2020-4578/): Cross-site scripting in WebSphere Application Server (medium 5.4)
- [CVE-2020-4576](https://insights.sbomify.com/CVE-2020-4576/): Deserialization in WebSphere Application Server (medium 5.3)
- [CVE-2020-4575](https://insights.sbomify.com/CVE-2020-4575/): Cross-site scripting in WebSphere Application Server ND (medium 4.7)
- [CVE-2020-4574](https://insights.sbomify.com/CVE-2020-4574/): Misconfiguration in Security Key Lifecycle Manager (high 7.4)
- [CVE-2020-4573](https://insights.sbomify.com/CVE-2020-4573/): Information disclosure in Security Key Lifecycle Manager (medium 5.3)
- [CVE-2020-4572](https://insights.sbomify.com/CVE-2020-4572/): Information disclosure in Security Key Lifecycle Manager (medium 5.3)
- [CVE-2020-4569](https://insights.sbomify.com/CVE-2020-4569/): Security feature bypass in Security Key Lifecycle Manager (medium 6.5)
- [CVE-2020-4568](https://insights.sbomify.com/CVE-2020-4568/): Information disclosure in Security Key Lifecycle Manager (medium 6.3)
- [CVE-2020-4567](https://insights.sbomify.com/CVE-2020-4567/): Auth bypass in Security Key Lifecycle Manager (high 8.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/60/