# Vulnerabilities published in 2020 - [CVE-2020-4566](https://insights.sbomify.com/CVE-2020-4566/): Information disclosure in Sterling B2B Integrator (medium 6.5) - [CVE-2020-4565](https://insights.sbomify.com/CVE-2020-4565/): Information disclosure in Spectrum Protect Plus (medium 5.9) - [CVE-2020-4564](https://insights.sbomify.com/CVE-2020-4564/): Cross-site scripting in Sterling B2B Integrator (medium 5.4) - [CVE-2020-4562](https://insights.sbomify.com/CVE-2020-4562/): Information disclosure in Planning Analytics (medium 5.3) - [CVE-2020-4561](https://insights.sbomify.com/CVE-2020-4561/): Missing authorization in Cognos Analytics (critical 10.0) - [CVE-2020-4560](https://insights.sbomify.com/CVE-2020-4560/): Cross-site scripting in Financial Transaction Manager (medium 4.7) - [CVE-2020-4559](https://insights.sbomify.com/CVE-2020-4559/): Denial of service in Spectrum Protect (medium 5.9) - [CVE-2020-4557](https://insights.sbomify.com/CVE-2020-4557/): Cross-site scripting in Business Automation Workflow (medium 5.4) - [CVE-2020-4556](https://insights.sbomify.com/CVE-2020-4556/): IBM Financial Transaction Manager information disclosure (medium 4.0) - [CVE-2020-4555](https://insights.sbomify.com/CVE-2020-4555/): Auth bypass in Financial Transaction Manager (medium 6.3) - [CVE-2020-4554](https://insights.sbomify.com/CVE-2020-4554/): Memory corruption in i2 Analyst Notebook (high 7.8) - [CVE-2020-4553](https://insights.sbomify.com/CVE-2020-4553/): Memory corruption in i2 Analyst Notebook (high 7.8) - [CVE-2020-4552](https://insights.sbomify.com/CVE-2020-4552/): Memory corruption in i2 Analyst Notebook (high 7.8) - [CVE-2020-4551](https://insights.sbomify.com/CVE-2020-4551/): Memory corruption in i2 Analyst Notebook (high 7.8) - [CVE-2020-4550](https://insights.sbomify.com/CVE-2020-4550/): Memory corruption in i2 Analyst Notebook (high 7.8) - [CVE-2020-4549](https://insights.sbomify.com/CVE-2020-4549/): Memory corruption in i2 Analyst Notebook (high 7.8) - [CVE-2020-4548](https://insights.sbomify.com/CVE-2020-4548/): Other in Content Navigator (medium 4.3) - [CVE-2020-4547](https://insights.sbomify.com/CVE-2020-4547/): Other in Engineering Lifecycle Optimization (medium 5.4) - [CVE-2020-4546](https://insights.sbomify.com/CVE-2020-4546/): Cross-site scripting in Engineering Workflow Management (medium 5.4) - [CVE-2020-4545](https://insights.sbomify.com/CVE-2020-4545/): Code injection in Aspera Connect (high 7.8) - [CVE-2020-4544](https://insights.sbomify.com/CVE-2020-4544/): Information disclosure in Engineering Lifecycle Optimization (medium 4.3) - [CVE-2020-4542](https://insights.sbomify.com/CVE-2020-4542/): Cross-site scripting in Rational Rhapsody Design Manager (medium 5.4) - [CVE-2020-4541](https://insights.sbomify.com/CVE-2020-4541/): Cross-site scripting in Jazz Reporting Service (medium 6.1) - [CVE-2020-4539](https://insights.sbomify.com/CVE-2020-4539/): Cross-site scripting in Jazz Reporting Service (medium 6.1) - [CVE-2020-4536](https://insights.sbomify.com/CVE-2020-4536/): Information disclosure in OpenPages GRC Platform (medium 4.3) - [CVE-2020-4535](https://insights.sbomify.com/CVE-2020-4535/): Cross-site scripting in OpenPages GRC Platform (medium 5.4) - [CVE-2020-4534](https://insights.sbomify.com/CVE-2020-4534/): Privilege escalation in WebSphere Application Server (high 7.8) - [CVE-2020-4533](https://insights.sbomify.com/CVE-2020-4533/): Cross-site scripting in Jazz Reporting Service (medium 6.1) - [CVE-2020-4532](https://insights.sbomify.com/CVE-2020-4532/): Information disclosure in Business Process Manager Express (medium 5.3) - [CVE-2020-4531](https://insights.sbomify.com/CVE-2020-4531/): Information disclosure in Business Automation Workflow (medium 5.3) - [CVE-2020-4530](https://insights.sbomify.com/CVE-2020-4530/): Cross-site scripting in Business Automation Workflow (medium 5.4) - [CVE-2020-4529](https://insights.sbomify.com/CVE-2020-4529/): Server-side request forgery in Maximo Asset Management (high 7.3) - [CVE-2020-4528](https://insights.sbomify.com/CVE-2020-4528/): Information disclosure in DataPower Gateway (medium 5.9) - [CVE-2020-4527](https://insights.sbomify.com/CVE-2020-4527/): Misconfiguration in Planning Analytics (medium 5.9) - [CVE-2020-4526](https://insights.sbomify.com/CVE-2020-4526/): Cross-site request forgery in Maximo Asset Management (medium 4.3) - [CVE-2020-4525](https://insights.sbomify.com/CVE-2020-4525/): Cross-site scripting in Rational Rhapsody Design Manager (medium 5.4) - [CVE-2020-4524](https://insights.sbomify.com/CVE-2020-4524/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4) - [CVE-2020-4522](https://insights.sbomify.com/CVE-2020-4522/): Cross-site scripting in Engineering Workflow Management (medium 5.4) - [CVE-2020-4521](https://insights.sbomify.com/CVE-2020-4521/): Deserialization in Maximo Asset Management (high 8.8) - [CVE-2020-4520](https://insights.sbomify.com/CVE-2020-4520/): Cross-site scripting in Cognos Analytics (high 7.1) - [CVE-2020-4516](https://insights.sbomify.com/CVE-2020-4516/): Cross-site scripting in Business Automation Workflow (medium 5.4) - [CVE-2020-4513](https://insights.sbomify.com/CVE-2020-4513/): Cross-site scripting in QRadar SIEM (medium 6.1) - [CVE-2020-4512](https://insights.sbomify.com/CVE-2020-4512/): Command injection in QRadar SIEM (critical 9.1) - [CVE-2020-4511](https://insights.sbomify.com/CVE-2020-4511/): Denial of service in QRadar SIEM (medium 6.5) - [CVE-2020-4510](https://insights.sbomify.com/CVE-2020-4510/): XML external entity in QRadar SIEM (high 7.6) - [CVE-2020-4509](https://insights.sbomify.com/CVE-2020-4509/): XML external entity in QRadar SIEM (high 7.6) - [CVE-2020-4503](https://insights.sbomify.com/CVE-2020-4503/): Cross-site scripting in Planning Analytics Local (medium 6.1) - [CVE-2020-4499](https://insights.sbomify.com/CVE-2020-4499/): Auth bypass in Security Access Manager (high 7.3) - [CVE-2020-4498](https://insights.sbomify.com/CVE-2020-4498/): Information disclosure in MQ Appliance (medium 4.1) - [CVE-2020-4497](https://insights.sbomify.com/CVE-2020-4497/): IBM Spectrum Protect Plus information disclosure (medium 6.8) - [CVE-2020-4496](https://insights.sbomify.com/CVE-2020-4496/): Security feature bypass in Spectrum Protect Plus (medium 6.8) - [CVE-2020-4495](https://insights.sbomify.com/CVE-2020-4495/): Missing authorization in Engineering Lifecycle Optimization (high 8.8) - [CVE-2020-4494](https://insights.sbomify.com/CVE-2020-4494/): Auth bypass in Spectrum Protect Client (AIX) (high 7.5) - [CVE-2020-4493](https://insights.sbomify.com/CVE-2020-4493/): Auth bypass in Maximo Asset Management (critical 9.8) - [CVE-2020-4492](https://insights.sbomify.com/CVE-2020-4492/): Denial of service in Spectrum Scale (medium 6.2) - [CVE-2020-4491](https://insights.sbomify.com/CVE-2020-4491/): Denial of service in Spectrum Scale (medium 4.0) - [CVE-2020-4490](https://insights.sbomify.com/CVE-2020-4490/): Open redirect in Business Automation Workflow (medium 5.3) - [CVE-2020-4487](https://insights.sbomify.com/CVE-2020-4487/): Information disclosure in Engineering Lifecycle Optimization (medium 4.3) - [CVE-2020-4486](https://insights.sbomify.com/CVE-2020-4486/): Other in QRadar Wincollect (high 8.1) - [CVE-2020-4485](https://insights.sbomify.com/CVE-2020-4485/): Security feature bypass in QRadar Wincollect (medium 6.5) - [CVE-2020-4484](https://insights.sbomify.com/CVE-2020-4484/): Information disclosure in UrbanCode Deploy (medium 4.3) - [CVE-2020-4483](https://insights.sbomify.com/CVE-2020-4483/): Information disclosure in UrbanCode Deploy (medium 4.3) - [CVE-2020-4482](https://insights.sbomify.com/CVE-2020-4482/): Missing authorization in UrbanCode Deploy (medium 5.3) - [CVE-2020-4481](https://insights.sbomify.com/CVE-2020-4481/): XML external entity in UrbanCode Deploy (high 8.2) - [CVE-2020-4477](https://insights.sbomify.com/CVE-2020-4477/): Information disclosure in Spectrum Protect Plus (medium 5.3) - [CVE-2020-4476](https://insights.sbomify.com/CVE-2020-4476/): Information disclosure in Sterling File Gateway (medium 5.3) - [CVE-2020-4475](https://insights.sbomify.com/CVE-2020-4475/): Information disclosure in Sterling B2B Integrator (medium 4.3) - [CVE-2020-4471](https://insights.sbomify.com/CVE-2020-4471/): Missing authorization in Spectrum Protect Plus (medium 4.8) - [CVE-2020-4470](https://insights.sbomify.com/CVE-2020-4470/): File upload in Spectrum Protect Plus (high 7.1) - [CVE-2020-4469](https://insights.sbomify.com/CVE-2020-4469/): Command injection in Spectrum Protect Plus (high 8.1) - [CVE-2020-4468](https://insights.sbomify.com/CVE-2020-4468/): Memory corruption in i2 Analysts Notebook (high 7.8) - [CVE-2020-4467](https://insights.sbomify.com/CVE-2020-4467/): Memory corruption in i2 Analysts Notebook (high 7.8) - [CVE-2020-4466](https://insights.sbomify.com/CVE-2020-4466/): Denial of service in MQ for HPE NonStop (medium 6.5) - [CVE-2020-4465](https://insights.sbomify.com/CVE-2020-4465/): Memory corruption in MQ Appliance (medium 5.3) - [CVE-2020-4464](https://insights.sbomify.com/CVE-2020-4464/): Deserialization in WebSphere Application Server (high 8.8) - [CVE-2020-4463](https://insights.sbomify.com/CVE-2020-4463/): XML external entity in Maximo Asset Management (high 8.2) - [CVE-2020-4462](https://insights.sbomify.com/CVE-2020-4462/): XML external entity in External Authentication Server (high 8.2) - [CVE-2020-4461](https://insights.sbomify.com/CVE-2020-4461/): Auth bypass in Security Access Manager Appliance (medium 6.5) - [CVE-2020-4459](https://insights.sbomify.com/CVE-2020-4459/): Hardcoded credentials in Security Secret Server (medium 5.9) - [CVE-2020-4452](https://insights.sbomify.com/CVE-2020-4452/): Weak cryptography in API Connect (medium 5.9) - [CVE-2020-4450](https://insights.sbomify.com/CVE-2020-4450/): Deserialization in WebSphere Application Server (critical 9.8) - [CVE-2020-4449](https://insights.sbomify.com/CVE-2020-4449/): Deserialization in WebSphere Application Server (high 7.5) - [CVE-2020-4448](https://insights.sbomify.com/CVE-2020-4448/): Deserialization in WebSphere Application Server (critical 9.8) - [CVE-2020-4447](https://insights.sbomify.com/CVE-2020-4447/): Cross-site scripting in FileNet Content Manager (medium 5.4) - [CVE-2020-4446](https://insights.sbomify.com/CVE-2020-4446/): Missing authorization in Business Automation Workflow (medium 4.3) - [CVE-2020-4445](https://insights.sbomify.com/CVE-2020-4445/): Cross-site scripting in Engineering Workflow Management (medium 5.4) - [CVE-2020-4436](https://insights.sbomify.com/CVE-2020-4436/): Memory corruption in Aspera Application Platform On Demand (high 8.8) - [CVE-2020-4435](https://insights.sbomify.com/CVE-2020-4435/): Memory corruption in Aspera Application Platform On Demand (high 7.5) - [CVE-2020-4434](https://insights.sbomify.com/CVE-2020-4434/): Memory corruption in Aspera Application Platform On Demand (high 7.5) - [CVE-2020-4433](https://insights.sbomify.com/CVE-2020-4433/): Memory corruption in Aspera Application Platform On Demand (high 7.5) - [CVE-2020-4432](https://insights.sbomify.com/CVE-2020-4432/): Command injection in Aspera Application Platform On Demand (high 7.5) - [CVE-2020-4431](https://insights.sbomify.com/CVE-2020-4431/): Cross-site scripting in Planning Analytics Local (medium 5.4) - [CVE-2020-4430](https://insights.sbomify.com/CVE-2020-4430/): IBM Data Risk Manager Directory Traversal (medium 4.3, exploited in the wild) - [CVE-2020-4429](https://insights.sbomify.com/CVE-2020-4429/): Hardcoded credentials in Data Risk Manager (critical 10.0) - [CVE-2020-4428](https://insights.sbomify.com/CVE-2020-4428/): IBM Data Risk Manager Remote Code Execution (critical 9.1, exploited in the wild) - [CVE-2020-4427](https://insights.sbomify.com/CVE-2020-4427/): IBM Data Risk Manager Security Bypass (critical 9.0, exploited in the wild) - [CVE-2020-4422](https://insights.sbomify.com/CVE-2020-4422/): Memory corruption in i2 Analysts Notebook (high 7.8) - [CVE-2020-4421](https://insights.sbomify.com/CVE-2020-4421/): Auth bypass in WebSphere Application Server Liberty (medium 5.0) - [CVE-2020-4420](https://insights.sbomify.com/CVE-2020-4420/): Denial of service in DB2 for Linux- UNIX and Windows (high 7.5) - [CVE-2020-4419](https://insights.sbomify.com/CVE-2020-4419/): Cross-site scripting in Jazz Reporting Service (medium 5.4) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/61/