# Vulnerabilities published in 2020


- [CVE-2020-4282](https://insights.sbomify.com/CVE-2020-4282/): Security feature bypass in Security Information Queue (low 3.0)
- [CVE-2020-4281](https://insights.sbomify.com/CVE-2020-4281/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2020-4280](https://insights.sbomify.com/CVE-2020-4280/): Deserialization in QRadar SIEM (medium 6.3)
- [CVE-2020-4278](https://insights.sbomify.com/CVE-2020-4278/): Privilege escalation in Spectrum Computing Suite for High Performance Analytics (high 7.4)
- [CVE-2020-4277](https://insights.sbomify.com/CVE-2020-4277/): Information disclosure in TRIRIGA Application Platform (medium 5.3)
- [CVE-2020-4276](https://insights.sbomify.com/CVE-2020-4276/): Privilege escalation in WebSphere Application Server (high 7.5)
- [CVE-2020-4274](https://insights.sbomify.com/CVE-2020-4274/): Missing authorization in QRadar (medium 5.4)
- [CVE-2020-4273](https://insights.sbomify.com/CVE-2020-4273/): Command injection in Spectrum Scale (high 7.4)
- [CVE-2020-4272](https://insights.sbomify.com/CVE-2020-4272/): Path traversal in QRadar (medium 5.5)
- [CVE-2020-4271](https://insights.sbomify.com/CVE-2020-4271/): Command injection in QRadar (medium 6.3)
- [CVE-2020-4270](https://insights.sbomify.com/CVE-2020-4270/): Misconfiguration in QRadar (high 8.4)
- [CVE-2020-4269](https://insights.sbomify.com/CVE-2020-4269/): Hardcoded credentials in QRadar (high 7.5)
- [CVE-2020-4268](https://insights.sbomify.com/CVE-2020-4268/): Cross-site scripting in QRadar (medium 5.4)
- [CVE-2020-4267](https://insights.sbomify.com/CVE-2020-4267/): Denial of service in MQ Appliance (medium 5.3)
- [CVE-2020-4266](https://insights.sbomify.com/CVE-2020-4266/): Memory corruption in i2 Analysts Notebook (high 7.8)
- [CVE-2020-4265](https://insights.sbomify.com/CVE-2020-4265/): Memory corruption in i2 Analysts Notebook (high 7.8)
- [CVE-2020-4264](https://insights.sbomify.com/CVE-2020-4264/): Memory corruption in i2 Analysts Notebook (high 7.8)
- [CVE-2020-4263](https://insights.sbomify.com/CVE-2020-4263/): Memory corruption in i2 Analysts Notebook (high 7.8)
- [CVE-2020-4262](https://insights.sbomify.com/CVE-2020-4262/): Memory corruption in i2 Analysts Notebook (high 7.8)
- [CVE-2020-4261](https://insights.sbomify.com/CVE-2020-4261/): Memory corruption in i2 Analysts Notebook (high 7.8)
- [CVE-2020-4260](https://insights.sbomify.com/CVE-2020-4260/): Information disclosure in UrbanCode Deploy (low 3.1)
- [CVE-2020-4259](https://insights.sbomify.com/CVE-2020-4259/): Missing authorization in Sterling File Gateway (medium 6.5)
- [CVE-2020-4258](https://insights.sbomify.com/CVE-2020-4258/): Memory corruption in i2 Analysts Notebook (high 7.8)
- [CVE-2020-4257](https://insights.sbomify.com/CVE-2020-4257/): Memory corruption in i2 Analysts Notebook (high 7.8)
- [CVE-2020-4254](https://insights.sbomify.com/CVE-2020-4254/): Weak cryptography in Security Guardium Big Data Intelligence (medium 5.9)
- [CVE-2020-4253](https://insights.sbomify.com/CVE-2020-4253/): Auth bypass in Content Navigator (medium 6.3)
- [CVE-2020-4252](https://insights.sbomify.com/CVE-2020-4252/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2020-4251](https://insights.sbomify.com/CVE-2020-4251/): Cross-site scripting in API Connect (medium 5.4)
- [CVE-2020-4249](https://insights.sbomify.com/CVE-2020-4249/): Missing authorization in Security Identity Governance and Intelligence (medium 6.5)
- [CVE-2020-4248](https://insights.sbomify.com/CVE-2020-4248/): Information disclosure in Security Identity Governance and Intelligence (low 2.7)
- [CVE-2020-4246](https://insights.sbomify.com/CVE-2020-4246/): XML external entity in Security Identity Governance and Intelligence (high 7.1)
- [CVE-2020-4245](https://insights.sbomify.com/CVE-2020-4245/): Misconfiguration in Security Identity Governance and Intelligence (medium 5.9)
- [CVE-2020-4244](https://insights.sbomify.com/CVE-2020-4244/): Information disclosure in Security Identity Governance and Intelligence (medium 5.3)
- [CVE-2020-4243](https://insights.sbomify.com/CVE-2020-4243/): Auth bypass in Security Identity Governance and Intelligence (low 3.7)
- [CVE-2020-4242](https://insights.sbomify.com/CVE-2020-4242/): Command injection in Spectrum Protect Plus (high 8.8)
- [CVE-2020-4241](https://insights.sbomify.com/CVE-2020-4241/): Command injection in Spectrum Protect Plus (high 7.5)
- [CVE-2020-4240](https://insights.sbomify.com/CVE-2020-4240/): Path traversal in Spectrum Protect Plus (medium 4.8)
- [CVE-2020-4239](https://insights.sbomify.com/CVE-2020-4239/): Information disclosure in Tivoli Netcool Impact (medium 5.3)
- [CVE-2020-4238](https://insights.sbomify.com/CVE-2020-4238/): Cross-site request forgery in Tivoli Netcool Impact (medium 4.3)
- [CVE-2020-4237](https://insights.sbomify.com/CVE-2020-4237/): Cross-site request forgery in Tivoli Netcool Impact (medium 4.3)
- [CVE-2020-4236](https://insights.sbomify.com/CVE-2020-4236/): Denial of service in Tivoli Netcool Impact (medium 6.5)
- [CVE-2020-4235](https://insights.sbomify.com/CVE-2020-4235/): Cross-site scripting in Tivoli Netcool Impact (medium 5.4)
- [CVE-2020-4233](https://insights.sbomify.com/CVE-2020-4233/): Information disclosure in Security Identity Governance and Intelligence (low 3.7)
- [CVE-2020-4232](https://insights.sbomify.com/CVE-2020-4232/): Information disclosure in Security Identity Governance and Intelligence (medium 5.3)
- [CVE-2020-4231](https://insights.sbomify.com/CVE-2020-4231/): Command injection in Security Identity Governance and Intelligence (medium 4.3)
- [CVE-2020-4230](https://insights.sbomify.com/CVE-2020-4230/): Privilege escalation in DB2 for Linux- UNIX and Windows (medium 6.7)
- [CVE-2020-4229](https://insights.sbomify.com/CVE-2020-4229/): Auth bypass in MobileFirst Platform Foundation (medium 5.6)
- [CVE-2020-4226](https://insights.sbomify.com/CVE-2020-4226/): Information disclosure in MobileFirst Platform Foundation (medium 5.9)
- [CVE-2020-4224](https://insights.sbomify.com/CVE-2020-4224/): Information disclosure in StoredIQ (low 2.9)
- [CVE-2020-4223](https://insights.sbomify.com/CVE-2020-4223/): Cross-site scripting in Maximo Asset Management (medium 5.4)
- [CVE-2020-4222](https://insights.sbomify.com/CVE-2020-4222/): Command injection in Spectrum Protect Plus (critical 9.8)
- [CVE-2020-4217](https://insights.sbomify.com/CVE-2020-4217/): Denial of service in Spectrum Scale (high 7.5)
- [CVE-2020-4216](https://insights.sbomify.com/CVE-2020-4216/): Hardcoded credentials in Spectrum Protect Plus (high 7.5)
- [CVE-2020-4214](https://insights.sbomify.com/CVE-2020-4214/): Path traversal in Spectrum Protect Plus (high 7.5)
- [CVE-2020-4213](https://insights.sbomify.com/CVE-2020-4213/): Command injection in Spectrum Protect Plus (critical 9.8)
- [CVE-2020-4212](https://insights.sbomify.com/CVE-2020-4212/): Command injection in Spectrum Protect Plus (critical 9.8)
- [CVE-2020-4211](https://insights.sbomify.com/CVE-2020-4211/): Command injection in Spectrum Protect Plus (critical 9.8)
- [CVE-2020-4210](https://insights.sbomify.com/CVE-2020-4210/): Command injection in Spectrum Protect Plus (critical 9.8)
- [CVE-2020-4209](https://insights.sbomify.com/CVE-2020-4209/): Path traversal in Spectrum Protect Plus (medium 5.4)
- [CVE-2020-4208](https://insights.sbomify.com/CVE-2020-4208/): Hardcoded credentials in Spectrum Protect Plus (high 7.5)
- [CVE-2020-4207](https://insights.sbomify.com/CVE-2020-4207/): Memory corruption in IoT MessageSight (critical 9.8)
- [CVE-2020-4206](https://insights.sbomify.com/CVE-2020-4206/): Command injection in Spectrum Protect Plus (high 7.5)
- [CVE-2020-4205](https://insights.sbomify.com/CVE-2020-4205/): Auth bypass in DataPower Gateway (medium 5.0)
- [CVE-2020-4204](https://insights.sbomify.com/CVE-2020-4204/): Memory corruption in DB2 for Linux- UNIX and Windows (high 8.4)
- [CVE-2020-4203](https://insights.sbomify.com/CVE-2020-4203/): Information disclosure in DataPower Gateway (medium 4.9)
- [CVE-2020-4202](https://insights.sbomify.com/CVE-2020-4202/): Auth bypass in UrbanCode Deploy (medium 5.0)
- [CVE-2020-4200](https://insights.sbomify.com/CVE-2020-4200/): Denial of service in DB2 for Linux- UNIX and Windows (medium 6.5)
- [CVE-2020-4199](https://insights.sbomify.com/CVE-2020-4199/): Cross-site request forgery in Tivoli Netcool/OMNIbus (medium 4.3)
- [CVE-2020-4198](https://insights.sbomify.com/CVE-2020-4198/): Cross-site scripting in Tivoli Netcool/OMNIbus (medium 5.4)
- [CVE-2020-4197](https://insights.sbomify.com/CVE-2020-4197/): Information disclosure in Tivoli Netcool/OMNIbus (low 2.4)
- [CVE-2020-4196](https://insights.sbomify.com/CVE-2020-4196/): Cross-site scripting in Tivoli Netcool/OMNIbus (medium 5.4)
- [CVE-2020-4195](https://insights.sbomify.com/CVE-2020-4195/): Other in API Connect (medium 5.4)
- [CVE-2020-4193](https://insights.sbomify.com/CVE-2020-4193/): Auth bypass in Security Guardium (medium 4.4)
- [CVE-2020-4191](https://insights.sbomify.com/CVE-2020-4191/): Weak cryptography in Security Guardium (medium 4.1)
- [CVE-2020-4190](https://insights.sbomify.com/CVE-2020-4190/): Hardcoded credentials in Security Guardium (medium 4.1)
- [CVE-2020-4189](https://insights.sbomify.com/CVE-2020-4189/): Information disclosure in Security Guardium (medium 4.3)
- [CVE-2020-4188](https://insights.sbomify.com/CVE-2020-4188/): Weak cryptography in Security Guardium (medium 5.3)
- [CVE-2020-4187](https://insights.sbomify.com/CVE-2020-4187/): Information disclosure in Security Guardium (medium 5.3)
- [CVE-2020-4186](https://insights.sbomify.com/CVE-2020-4186/): Information disclosure in Security Guardium (medium 5.3)
- [CVE-2020-4185](https://insights.sbomify.com/CVE-2020-4185/): Weak cryptography in Security Guardium (medium 5.9)
- [CVE-2020-4184](https://insights.sbomify.com/CVE-2020-4184/): Privilege escalation in Security Guardium (medium 5.8)
- [CVE-2020-4183](https://insights.sbomify.com/CVE-2020-4183/): Cross-site scripting in Security Guardium (medium 6.1)
- [CVE-2020-4182](https://insights.sbomify.com/CVE-2020-4182/): Cross-site scripting in Security Guardium (medium 6.1)
- [CVE-2020-4180](https://insights.sbomify.com/CVE-2020-4180/): Command injection in Security Guardium (high 8.8)
- [CVE-2020-4177](https://insights.sbomify.com/CVE-2020-4177/): Hardcoded credentials in Security Guardium (medium 6.8)
- [CVE-2020-4175](https://insights.sbomify.com/CVE-2020-4175/): Misconfiguration in Security Guardium Insights (medium 5.9)
- [CVE-2020-4174](https://insights.sbomify.com/CVE-2020-4174/): Weak cryptography in Security Guardium Insights (medium 5.9)
- [CVE-2020-4173](https://insights.sbomify.com/CVE-2020-4173/): Information disclosure in InfoSphere Guardium Activity Monitor (low 3.1)
- [CVE-2020-4172](https://insights.sbomify.com/CVE-2020-4172/): Information disclosure in Security Guardium Insights (low 3.7)
- [CVE-2020-4171](https://insights.sbomify.com/CVE-2020-4171/): Information disclosure in Security Guardium Insights (medium 4.3)
- [CVE-2020-4170](https://insights.sbomify.com/CVE-2020-4170/): Cross-site request forgery in Security Guardium Insights (medium 4.3)
- [CVE-2020-4169](https://insights.sbomify.com/CVE-2020-4169/): Weak cryptography in Security Guardium Insights (medium 5.9)
- [CVE-2020-4167](https://insights.sbomify.com/CVE-2020-4167/): Auth bypass in Security Guardium Insights (medium 6.5)
- [CVE-2020-4166](https://insights.sbomify.com/CVE-2020-4166/): Information disclosure in Security Guardium Insights (medium 5.3)
- [CVE-2020-4165](https://insights.sbomify.com/CVE-2020-4165/): Other in Security Guardium Insights (medium 5.4)
- [CVE-2020-4164](https://insights.sbomify.com/CVE-2020-4164/): Information disclosure in Security Information Queue (low 2.7)
- [CVE-2020-4163](https://insights.sbomify.com/CVE-2020-4163/): Code injection in WebSphere Application Server (medium 6.6)
- [CVE-2020-4162](https://insights.sbomify.com/CVE-2020-4162/): Cross-site scripting in InfoSphere Information Server (medium 5.4)
- [CVE-2020-4161](https://insights.sbomify.com/CVE-2020-4161/): Denial of service in DB2 for Linux- UNIX and Windows (medium 6.5)
- [CVE-2020-4160](https://insights.sbomify.com/CVE-2020-4160/): Misconfiguration in QRadar Network Security (medium 5.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/63/
