# Vulnerabilities published in 2021 - [CVE-2021-29905](https://insights.sbomify.com/CVE-2021-29905/): Cross-site scripting in Jazz for Service Management (medium 5.4) - [CVE-2021-29904](https://insights.sbomify.com/CVE-2021-29904/): Information disclosure in Jazz for Service Management (medium 6.2) - [CVE-2021-29903](https://insights.sbomify.com/CVE-2021-29903/): SQL injection in Sterling B2B Integrator (medium 6.3) - [CVE-2021-29899](https://insights.sbomify.com/CVE-2021-29899/): Denial of service in Engineering Requirements Quality Assistant (medium 6.5) - [CVE-2021-29894](https://insights.sbomify.com/CVE-2021-29894/): Weak cryptography in Cloud Pak for Security (medium 5.9) - [CVE-2021-29892](https://insights.sbomify.com/CVE-2021-29892/): IBM Cognos Controller information disclosure (medium 5.9) - [CVE-2021-29891](https://insights.sbomify.com/CVE-2021-29891/): File upload in Power 9 AC922 (medium 4.5) - [CVE-2021-29888](https://insights.sbomify.com/CVE-2021-29888/): Cross-site request forgery in InfoSphere Information Server (medium 6.5) - [CVE-2021-29883](https://insights.sbomify.com/CVE-2021-29883/): Information disclosure in Transformation Extender Advanced (medium 4.3) - [CVE-2021-29880](https://insights.sbomify.com/CVE-2021-29880/): Information disclosure in QRadar SIEM (medium 5.3) - [CVE-2021-29878](https://insights.sbomify.com/CVE-2021-29878/): Cross-site scripting in Business Automation Workflow (medium 5.4) - [CVE-2021-29875](https://insights.sbomify.com/CVE-2021-29875/): Information disclosure in InfoSphere Information Server (medium 5.9) - [CVE-2021-29873](https://insights.sbomify.com/CVE-2021-29873/): Security feature bypass in FlashSystem 900 (high 8.8) - [CVE-2021-29872](https://insights.sbomify.com/CVE-2021-29872/): Other in Cloud Pak for Automation (medium 5.4) - [CVE-2021-29868](https://insights.sbomify.com/CVE-2021-29868/): Information disclosure in i2 iBase (medium 4.0) - [CVE-2021-29867](https://insights.sbomify.com/CVE-2021-29867/): Missing authorization in Cognos Analytics (medium 5.4) - [CVE-2021-29865](https://insights.sbomify.com/CVE-2021-29865/): Other in Jazz Team Server (medium 5.4) - [CVE-2021-29864](https://insights.sbomify.com/CVE-2021-29864/): Open redirect in Security Identity Manager (medium 6.8) - [CVE-2021-29863](https://insights.sbomify.com/CVE-2021-29863/): Server-side request forgery in QRadar SIEM (medium 5.4) - [CVE-2021-29862](https://insights.sbomify.com/CVE-2021-29862/): Denial of service in AIX (medium 6.2) - [CVE-2021-29861](https://insights.sbomify.com/CVE-2021-29861/): Information disclosure in AIX (medium 6.2) - [CVE-2021-29860](https://insights.sbomify.com/CVE-2021-29860/): Information disclosure in AIX (medium 6.2) - [CVE-2021-29859](https://insights.sbomify.com/CVE-2021-29859/): Auth bypass in Cloud Pak for Business Automation (low 3.5) - [CVE-2021-29856](https://insights.sbomify.com/CVE-2021-29856/): Denial of service in Tivoli Netcool/OMNIbus (medium 6.5) - [CVE-2021-29855](https://insights.sbomify.com/CVE-2021-29855/): Cross-site scripting in Sterling B2B Integrator (medium 5.4) - [CVE-2021-29854](https://insights.sbomify.com/CVE-2021-29854/): Other in Maximo Asset Management (medium 5.4) - [CVE-2021-29853](https://insights.sbomify.com/CVE-2021-29853/): Information disclosure in Planning Analytics Local (medium 4.3) - [CVE-2021-29852](https://insights.sbomify.com/CVE-2021-29852/): Cross-site scripting in Planning Analytics Local (medium 5.4) - [CVE-2021-29851](https://insights.sbomify.com/CVE-2021-29851/): Information disclosure in Planning Analytics Local (medium 4.3) - [CVE-2021-29849](https://insights.sbomify.com/CVE-2021-29849/): Cross-site scripting in QRadar SIEM (medium 5.4) - [CVE-2021-29847](https://insights.sbomify.com/CVE-2021-29847/): Weak cryptography in Power System S821LC Server (8001-12C) (medium 5.3) - [CVE-2021-29846](https://insights.sbomify.com/CVE-2021-29846/): Information disclosure in Security Guardium Insights (low 2.2) - [CVE-2021-29845](https://insights.sbomify.com/CVE-2021-29845/): Other in Security Guardium Insights (medium 4.3) - [CVE-2021-29844](https://insights.sbomify.com/CVE-2021-29844/): Server-side request forgery in Engineering Lifecycle Optimization (medium 5.4) - [CVE-2021-29843](https://insights.sbomify.com/CVE-2021-29843/): Denial of service in MQ Appliance (medium 5.3) - [CVE-2021-29842](https://insights.sbomify.com/CVE-2021-29842/): Information disclosure in WebSphere Application Server (low 3.7) - [CVE-2021-29841](https://insights.sbomify.com/CVE-2021-29841/): Cross-site scripting in Financial Transaction Manager (medium 5.4) - [CVE-2021-29838](https://insights.sbomify.com/CVE-2021-29838/): Misconfiguration in Security Guardium Insights (medium 5.9) - [CVE-2021-29837](https://insights.sbomify.com/CVE-2021-29837/): Cross-site request forgery in Sterling B2B Integrator (medium 4.3) - [CVE-2021-29836](https://insights.sbomify.com/CVE-2021-29836/): Cross-site scripting in Sterling B2B Integrator (medium 5.4) - [CVE-2021-29835](https://insights.sbomify.com/CVE-2021-29835/): Cross-site scripting in Business Automation Workflow (medium 5.4) - [CVE-2021-29834](https://insights.sbomify.com/CVE-2021-29834/): Cross-site scripting in Business Automation Workflow (medium 6.4) - [CVE-2021-29833](https://insights.sbomify.com/CVE-2021-29833/): Cross-site scripting in Jazz for Service Management (medium 6.4) - [CVE-2021-29832](https://insights.sbomify.com/CVE-2021-29832/): Cross-site scripting in Jazz for Service Management (medium 6.4) - [CVE-2021-29831](https://insights.sbomify.com/CVE-2021-29831/): XML external entity in Jazz for Service Management (high 7.1) - [CVE-2021-29827](https://insights.sbomify.com/CVE-2021-29827/): IBM InfoSphere Information Server clickjacking (medium 5.2) - [CVE-2021-29825](https://insights.sbomify.com/CVE-2021-29825/): Information disclosure in DB2 for Linux, UNIX and Windows (medium 5.9) - [CVE-2021-29824](https://insights.sbomify.com/CVE-2021-29824/): Missing authorization in Cognos Analytics (low 3.1) - [CVE-2021-29823](https://insights.sbomify.com/CVE-2021-29823/): Cross-site request forgery in Cognos Analytics (medium 4.3) - [CVE-2021-29822](https://insights.sbomify.com/CVE-2021-29822/): Cross-site scripting in Tivoli Netcool/OMNIbus (medium 5.4) - [CVE-2021-29821](https://insights.sbomify.com/CVE-2021-29821/): Cross-site scripting in Tivoli Netcool/OMNIbus (medium 5.4) - [CVE-2021-29820](https://insights.sbomify.com/CVE-2021-29820/): Cross-site scripting in Tivoli Netcool/OMNIbus (medium 5.4) - [CVE-2021-29819](https://insights.sbomify.com/CVE-2021-29819/): Cross-site scripting in Tivoli Netcool/OMNIbus (medium 5.4) - [CVE-2021-29818](https://insights.sbomify.com/CVE-2021-29818/): Cross-site scripting in Tivoli Netcool/OMNIbus (medium 5.4) - [CVE-2021-29817](https://insights.sbomify.com/CVE-2021-29817/): Cross-site scripting in Tivoli Netcool/OMNIbus (medium 5.4) - [CVE-2021-29816](https://insights.sbomify.com/CVE-2021-29816/): Cross-site request forgery in Jazz for Service Management (medium 4.3) - [CVE-2021-29815](https://insights.sbomify.com/CVE-2021-29815/): Cross-site scripting in Jazz for Service Management (medium 6.4) - [CVE-2021-29814](https://insights.sbomify.com/CVE-2021-29814/): Cross-site scripting in Jazz for Service Management (medium 6.4) - [CVE-2021-29813](https://insights.sbomify.com/CVE-2021-29813/): Cross-site scripting in Jazz for Service Management (medium 6.4) - [CVE-2021-29812](https://insights.sbomify.com/CVE-2021-29812/): Cross-site scripting in Jazz for Service Management (medium 6.4) - [CVE-2021-29811](https://insights.sbomify.com/CVE-2021-29811/): Information disclosure in Tivoli Netcool/OMNIbus (medium 4.9) - [CVE-2021-29810](https://insights.sbomify.com/CVE-2021-29810/): Cross-site scripting in Jazz for Service Management (medium 6.4) - [CVE-2021-29809](https://insights.sbomify.com/CVE-2021-29809/): Cross-site scripting in Tivoli Netcool/OMNIbus (medium 6.4) - [CVE-2021-29808](https://insights.sbomify.com/CVE-2021-29808/): Cross-site scripting in Tivoli Netcool/OMNIbus (medium 6.4) - [CVE-2021-29807](https://insights.sbomify.com/CVE-2021-29807/): Cross-site scripting in Tivoli Netcool/OMNIbus (medium 6.4) - [CVE-2021-29806](https://insights.sbomify.com/CVE-2021-29806/): Cross-site scripting in Tivoli Netcool/OMNIbus (medium 5.4) - [CVE-2021-29805](https://insights.sbomify.com/CVE-2021-29805/): Cross-site scripting in Tivoli Netcool/OMNIbus (medium 6.4) - [CVE-2021-29804](https://insights.sbomify.com/CVE-2021-29804/): Cross-site scripting in Tivoli Netcool/OMNIbus (medium 6.4) - [CVE-2021-29803](https://insights.sbomify.com/CVE-2021-29803/): Cross-site scripting in Tivoli Netcool/OMNIbus (medium 6.4) - [CVE-2021-29802](https://insights.sbomify.com/CVE-2021-29802/): Privilege escalation in Security (medium 5.6) - [CVE-2021-29801](https://insights.sbomify.com/CVE-2021-29801/): Privilege escalation in AIX (high 8.4) - [CVE-2021-29800](https://insights.sbomify.com/CVE-2021-29800/): Cross-site scripting in Jazz for Service Management (medium 6.4) - [CVE-2021-29799](https://insights.sbomify.com/CVE-2021-29799/): Information disclosure in Engineering Requirements Quality Assistant On-Premises (medium 6.5) - [CVE-2021-29798](https://insights.sbomify.com/CVE-2021-29798/): SQL injection in Sterling B2B Integrator (medium 6.3) - [CVE-2021-29795](https://insights.sbomify.com/CVE-2021-29795/): Denial of service in PowerVM Hypervisor (medium 6.0) - [CVE-2021-29794](https://insights.sbomify.com/CVE-2021-29794/): Weak cryptography in Tivoli Netcool Impact (medium 5.9) - [CVE-2021-29792](https://insights.sbomify.com/CVE-2021-29792/): Privilege escalation in Event Streams (medium 4.7) - [CVE-2021-29790](https://insights.sbomify.com/CVE-2021-29790/): Cross-site scripting in Engineering Requirements Quality Assistant On-Premises (medium 5.4) - [CVE-2021-29788](https://insights.sbomify.com/CVE-2021-29788/): Cross-site scripting in Engineering Requirements Quality Assistant On-Premises (medium 5.4) - [CVE-2021-29786](https://insights.sbomify.com/CVE-2021-29786/): Information disclosure in Engineering Lifecycle Optimization (medium 6.5) - [CVE-2021-29785](https://insights.sbomify.com/CVE-2021-29785/): Misconfiguration in Security SOAR (medium 5.9) - [CVE-2021-29784](https://insights.sbomify.com/CVE-2021-29784/): Information disclosure in i2 Analyze (medium 4.3) - [CVE-2021-29781](https://insights.sbomify.com/CVE-2021-29781/): Deserialization in Partner Engagement Manager (critical 9.8) - [CVE-2021-29780](https://insights.sbomify.com/CVE-2021-29780/): Missing authorization in Resilient OnPrem (medium 4.7) - [CVE-2021-29779](https://insights.sbomify.com/CVE-2021-29779/): Weak cryptography in QRadar SIEM (medium 5.9) - [CVE-2021-29777](https://insights.sbomify.com/CVE-2021-29777/): Race condition in DB2 for Linux, UNIX and Windows (medium 5.3) - [CVE-2021-29776](https://insights.sbomify.com/CVE-2021-29776/): Missing authorization in QRadar SIEM (low 3.1) - [CVE-2021-29775](https://insights.sbomify.com/CVE-2021-29775/): Cross-site scripting in Business Automation Workflow (medium 6.4) - [CVE-2021-29774](https://insights.sbomify.com/CVE-2021-29774/): Privilege escalation in Engineering Lifecycle Optimization (high 7.5) - [CVE-2021-29773](https://insights.sbomify.com/CVE-2021-29773/): Missing authorization in Security Guardium (medium 5.4) - [CVE-2021-29772](https://insights.sbomify.com/CVE-2021-29772/): Code injection in API Connect (medium 5.6) - [CVE-2021-29771](https://insights.sbomify.com/CVE-2021-29771/): Cross-site scripting in InfoSphere Information Server (medium 5.4) - [CVE-2021-29770](https://insights.sbomify.com/CVE-2021-29770/): Other in i2 Analyze (medium 4.1) - [CVE-2021-29769](https://insights.sbomify.com/CVE-2021-29769/): Information disclosure in i2 Analyze (low 3.1) - [CVE-2021-29768](https://insights.sbomify.com/CVE-2021-29768/): Missing authorization in Cognos Analytics (medium 4.3) - [CVE-2021-29767](https://insights.sbomify.com/CVE-2021-29767/): Information disclosure in i2 Analyst's Notebook Premium (medium 5.3) - [CVE-2021-29766](https://insights.sbomify.com/CVE-2021-29766/): Information disclosure in i2 Analyze (medium 5.3) - [CVE-2021-29765](https://insights.sbomify.com/CVE-2021-29765/): Information disclosure in PowerVM Hypervisor (medium 5.9) - [CVE-2021-29764](https://insights.sbomify.com/CVE-2021-29764/): Cross-site scripting in Sterling B2B Integrator (medium 6.4) - [CVE-2021-29763](https://insights.sbomify.com/CVE-2021-29763/): Denial of service in DB2 for Linux, UNIX and Windows (medium 5.1) --- From sbomify Insights: https://insights.sbomify.com/years/2021/page/175/