# Vulnerabilities published in 2020


- [CVE-2020-4415](https://insights.sbomify.com/CVE-2020-4415/): Memory corruption in Spectrum Protect (critical 9.8)
- [CVE-2020-4414](https://insights.sbomify.com/CVE-2020-4414/): Other in DB2 for Linux- UNIX and Windows (medium 5.1)
- [CVE-2020-4413](https://insights.sbomify.com/CVE-2020-4413/): Misconfiguration in Security Secret Server (medium 5.9)
- [CVE-2020-4412](https://insights.sbomify.com/CVE-2020-4412/): Denial of service in Spectrum Scale (medium 5.3)
- [CVE-2020-4411](https://insights.sbomify.com/CVE-2020-4411/): Denial of service in Spectrum Scale (high 7.1)
- [CVE-2020-4410](https://insights.sbomify.com/CVE-2020-4410/): Missing authorization in Rational Rhapsody Design Manager (medium 4.3)
- [CVE-2020-4409](https://insights.sbomify.com/CVE-2020-4409/): Open redirect in Maximo Asset Management (medium 6.8)
- [CVE-2020-4408](https://insights.sbomify.com/CVE-2020-4408/): Information disclosure in Qradar Advisor (medium 4.2)
- [CVE-2020-4406](https://insights.sbomify.com/CVE-2020-4406/): Other in Spectrum Protect Client (AIX) (medium 5.4)
- [CVE-2020-4405](https://insights.sbomify.com/CVE-2020-4405/): Information disclosure in Verify Gateway (IVG) (low 3.1)
- [CVE-2020-4400](https://insights.sbomify.com/CVE-2020-4400/): Auth bypass in Verify Gateway (IVG) (high 7.5)
- [CVE-2020-4399](https://insights.sbomify.com/CVE-2020-4399/): Denial of service in Verify Gateway (IVG) (medium 6.5)
- [CVE-2020-4397](https://insights.sbomify.com/CVE-2020-4397/): Information disclosure in Verify Gateway (IVG) (medium 6.8)
- [CVE-2020-4396](https://insights.sbomify.com/CVE-2020-4396/): Cross-site scripting in Rational Rhapsody Design Manager (medium 5.4)
- [CVE-2020-4395](https://insights.sbomify.com/CVE-2020-4395/): Auth bypass in Security Access Manager Appliance (medium 6.3)
- [CVE-2020-4388](https://insights.sbomify.com/CVE-2020-4388/): Denial of service in Cognos Analytics (medium 6.5)
- [CVE-2020-4387](https://insights.sbomify.com/CVE-2020-4387/): Race condition in DB2 for Linux- UNIX and Windows (medium 6.2)
- [CVE-2020-4386](https://insights.sbomify.com/CVE-2020-4386/): Race condition in DB2 for Linux- UNIX and Windows (medium 6.2)
- [CVE-2020-4385](https://insights.sbomify.com/CVE-2020-4385/): Hardcoded credentials in Verify Gateway (IVG) (medium 6.8)
- [CVE-2020-4384](https://insights.sbomify.com/CVE-2020-4384/): Cross-site scripting in InfoSphere Information Server (medium 5.4)
- [CVE-2020-4383](https://insights.sbomify.com/CVE-2020-4383/): Denial of service in Elastic Storage Server (medium 5.3)
- [CVE-2020-4382](https://insights.sbomify.com/CVE-2020-4382/): Denial of service in Elastic Storage Server (medium 6.2)
- [CVE-2020-4381](https://insights.sbomify.com/CVE-2020-4381/): Denial of service in Elastic Storage Server (medium 5.3)
- [CVE-2020-4380](https://insights.sbomify.com/CVE-2020-4380/): Cross-site scripting in Workload Scheduler (medium 5.4)
- [CVE-2020-4379](https://insights.sbomify.com/CVE-2020-4379/): Weak cryptography in Spectrum Scale (medium 5.9)
- [CVE-2020-4378](https://insights.sbomify.com/CVE-2020-4378/): Other in Spectrum Scale (medium 4.9)
- [CVE-2020-4377](https://insights.sbomify.com/CVE-2020-4377/): XML external entity in Cognos Analytics (high 8.2)
- [CVE-2020-4376](https://insights.sbomify.com/CVE-2020-4376/): Denial of service in MQ for HPE NonStop (medium 5.3)
- [CVE-2020-4375](https://insights.sbomify.com/CVE-2020-4375/): Denial of service in MQ Appliance (medium 5.9)
- [CVE-2020-4372](https://insights.sbomify.com/CVE-2020-4372/): Information disclosure in Verify Gateway (IVG) (medium 6.2)
- [CVE-2020-4371](https://insights.sbomify.com/CVE-2020-4371/): Information disclosure in Verify Gateway (IVG) (medium 4.0)
- [CVE-2020-4369](https://insights.sbomify.com/CVE-2020-4369/): Information disclosure in Verify Gateway (IVG) (medium 5.1)
- [CVE-2020-4367](https://insights.sbomify.com/CVE-2020-4367/): Weak cryptography in Planning Analytics Local (medium 5.9)
- [CVE-2020-4366](https://insights.sbomify.com/CVE-2020-4366/): Cross-site scripting in Planning Analytics Local (medium 6.1)
- [CVE-2020-4365](https://insights.sbomify.com/CVE-2020-4365/): Server-side request forgery in WebSphere Application Server (medium 5.3)
- [CVE-2020-4364](https://insights.sbomify.com/CVE-2020-4364/): Cross-site scripting in QRadar SIEM (medium 5.4)
- [CVE-2020-4363](https://insights.sbomify.com/CVE-2020-4363/): Memory corruption in DB2 for Linux- UNIX and Windows (high 8.4)
- [CVE-2020-4362](https://insights.sbomify.com/CVE-2020-4362/): Privilege escalation in WebSphere Application Server (high 7.5)
- [CVE-2020-4361](https://insights.sbomify.com/CVE-2020-4361/): Information disclosure in Planning Analytics (medium 4.3)
- [CVE-2020-4360](https://insights.sbomify.com/CVE-2020-4360/): Cross-site scripting in Planning Analytics Local (medium 5.4)
- [CVE-2020-4358](https://insights.sbomify.com/CVE-2020-4358/): Cross-site scripting in Spectrum Scale (medium 5.4)
- [CVE-2020-4357](https://insights.sbomify.com/CVE-2020-4357/): Information disclosure in Spectrum Scale (medium 4.3)
- [CVE-2020-4355](https://insights.sbomify.com/CVE-2020-4355/): Denial of service in DB2 for Linux- UNIX and Windows (medium 5.3)
- [CVE-2020-4354](https://insights.sbomify.com/CVE-2020-4354/): Cross-site scripting in Cognos Analytics (medium 5.4)
- [CVE-2020-4353](https://insights.sbomify.com/CVE-2020-4353/): Security feature bypass in MaaS360 (medium 4.6)
- [CVE-2020-4352](https://insights.sbomify.com/CVE-2020-4352/): Privilege escalation in MQ for HPE NonStop (medium 4.9)
- [CVE-2020-4350](https://insights.sbomify.com/CVE-2020-4350/): Weak cryptography in Spectrum Scale (medium 5.9)
- [CVE-2020-4349](https://insights.sbomify.com/CVE-2020-4349/): Weak cryptography in Spectrum Scale (medium 5.9)
- [CVE-2020-4348](https://insights.sbomify.com/CVE-2020-4348/): Missing authorization in Spectrum Scale (medium 6.5)
- [CVE-2020-4347](https://insights.sbomify.com/CVE-2020-4347/): Misconfiguration in InfoSphere Information Server (high 7.3)
- [CVE-2020-4346](https://insights.sbomify.com/CVE-2020-4346/): Missing authorization in API Connect (medium 5.3)
- [CVE-2020-4345](https://insights.sbomify.com/CVE-2020-4345/): SQL injection in i (low 2.9)
- [CVE-2020-4344](https://insights.sbomify.com/CVE-2020-4344/): Information disclosure in Tivoli Business Service Manager (medium 4.0)
- [CVE-2020-4343](https://insights.sbomify.com/CVE-2020-4343/): Memory corruption in i2 Analysts Notebook (high 7.8)
- [CVE-2020-4342](https://insights.sbomify.com/CVE-2020-4342/): Information disclosure in Security Secret Server (medium 5.3)
- [CVE-2020-4341](https://insights.sbomify.com/CVE-2020-4341/): Information disclosure in Security Secret Server (low 2.7)
- [CVE-2020-4340](https://insights.sbomify.com/CVE-2020-4340/): Security feature bypass in Security Secret Server (low 3.1)
- [CVE-2020-4338](https://insights.sbomify.com/CVE-2020-4338/): Information disclosure in MQ (medium 5.1)
- [CVE-2020-4337](https://insights.sbomify.com/CVE-2020-4337/): Other in API Connect (medium 6.5)
- [CVE-2020-4336](https://insights.sbomify.com/CVE-2020-4336/): Information disclosure in WebSphere eXtreme Scale (low 3.7)
- [CVE-2020-4329](https://insights.sbomify.com/CVE-2020-4329/): Information disclosure in WebSphere Application Server (medium 4.3)
- [CVE-2020-4328](https://insights.sbomify.com/CVE-2020-4328/): SQL injection in Financial Transaction Manager (medium 6.3)
- [CVE-2020-4327](https://insights.sbomify.com/CVE-2020-4327/): Information disclosure in Security Secret Server (low 2.7)
- [CVE-2020-4325](https://insights.sbomify.com/CVE-2020-4325/): Denial of service in Automation Workstream Services in Cloud Pak for Automation (medium 6.5)
- [CVE-2020-4324](https://insights.sbomify.com/CVE-2020-4324/): Security feature bypass in Security Secret Server (low 3.5)
- [CVE-2020-4323](https://insights.sbomify.com/CVE-2020-4323/): Cross-site scripting in Security Secret Server (medium 6.1)
- [CVE-2020-4322](https://insights.sbomify.com/CVE-2020-4322/): Other in Security Secret Server (medium 4.3)
- [CVE-2020-4320](https://insights.sbomify.com/CVE-2020-4320/): Security feature bypass in MQ (medium 5.3)
- [CVE-2020-4319](https://insights.sbomify.com/CVE-2020-4319/): Information disclosure in MQ Appliance (low 3.1)
- [CVE-2020-4318](https://insights.sbomify.com/CVE-2020-4318/): Cross-site scripting in Intelligent Operations Center (medium 5.4)
- [CVE-2020-4317](https://insights.sbomify.com/CVE-2020-4317/): Cross-site scripting in Intelligent Operations Center (medium 5.4)
- [CVE-2020-4316](https://insights.sbomify.com/CVE-2020-4316/): Information disclosure in Rational Publishing Engine (medium 4.3)
- [CVE-2020-4315](https://insights.sbomify.com/CVE-2020-4315/): Information disclosure in Business Automation Content Analyzer on Cloud (medium 4.3)
- [CVE-2020-4312](https://insights.sbomify.com/CVE-2020-4312/): Information disclosure in Sterling B2B Integrator (medium 4.3)
- [CVE-2020-4311](https://insights.sbomify.com/CVE-2020-4311/): Privilege escalation in Tivoli Monitoring (high 7.4)
- [CVE-2020-4310](https://insights.sbomify.com/CVE-2020-4310/): Denial of service in MQ (medium 5.9)
- [CVE-2020-4309](https://insights.sbomify.com/CVE-2020-4309/): Information disclosure in Content Navigator (medium 4.3)
- [CVE-2020-4307](https://insights.sbomify.com/CVE-2020-4307/): Missing authorization in Security Guardium (medium 6.5)
- [CVE-2020-4306](https://insights.sbomify.com/CVE-2020-4306/): Cross-site scripting in Planning Analytics Local (medium 5.4)
- [CVE-2020-4305](https://insights.sbomify.com/CVE-2020-4305/): Deserialization in InfoSphere Information Server (high 8.1)
- [CVE-2020-4304](https://insights.sbomify.com/CVE-2020-4304/): Cross-site scripting in WebSphere Application Server Liberty (medium 6.1)
- [CVE-2020-4303](https://insights.sbomify.com/CVE-2020-4303/): Cross-site scripting in WebSphere Application Server Liberty (medium 6.1)
- [CVE-2020-4302](https://insights.sbomify.com/CVE-2020-4302/): Code injection in Cognos Analytics (medium 5.5)
- [CVE-2020-4301](https://insights.sbomify.com/CVE-2020-4301/): Cross-site request forgery in Cognos Analytics (medium 4.3)
- [CVE-2020-4300](https://insights.sbomify.com/CVE-2020-4300/): XML external entity in Cognos Analytics (high 8.2)
- [CVE-2020-4299](https://insights.sbomify.com/CVE-2020-4299/): Information disclosure in Sterling B2B Integrator (medium 4.3)
- [CVE-2020-4298](https://insights.sbomify.com/CVE-2020-4298/): Cross-site scripting in InfoSphere Information Server (medium 5.4)
- [CVE-2020-4297](https://insights.sbomify.com/CVE-2020-4297/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2020-4295](https://insights.sbomify.com/CVE-2020-4295/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2020-4294](https://insights.sbomify.com/CVE-2020-4294/): Server-side request forgery in QRadar (medium 6.3)
- [CVE-2020-4292](https://insights.sbomify.com/CVE-2020-4292/): Misconfiguration in Security Information Queue (low 3.7)
- [CVE-2020-4291](https://insights.sbomify.com/CVE-2020-4291/): Information disclosure in Security Information Queue (medium 4.7)
- [CVE-2020-4290](https://insights.sbomify.com/CVE-2020-4290/): Auth bypass in Security Information Queue (medium 4.2)
- [CVE-2020-4289](https://insights.sbomify.com/CVE-2020-4289/): Misconfiguration in Security Information Queue (medium 5.3)
- [CVE-2020-4288](https://insights.sbomify.com/CVE-2020-4288/): Memory corruption in i2 Analysts Notebook (high 7.8)
- [CVE-2020-4287](https://insights.sbomify.com/CVE-2020-4287/): Memory corruption in i2 Analysts Notebook (high 7.8)
- [CVE-2020-4286](https://insights.sbomify.com/CVE-2020-4286/): Cross-site request forgery in InfoSphere Information Server (medium 4.3)
- [CVE-2020-4285](https://insights.sbomify.com/CVE-2020-4285/): Memory corruption in i2 Analysts Notebook (high 7.8)
- [CVE-2020-4284](https://insights.sbomify.com/CVE-2020-4284/): Information disclosure in Security Information Queue (medium 5.3)
- [CVE-2020-4283](https://insights.sbomify.com/CVE-2020-4283/): Hardcoded credentials in Security Information Queue (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/62/