# Vulnerabilities published in 2021


- [CVE-2021-29761](https://insights.sbomify.com/CVE-2021-29761/): Missing authorization in Sterling B2B Integrator (medium 4.3)
- [CVE-2021-29760](https://insights.sbomify.com/CVE-2021-29760/): Missing authorization in Sterling B2B Integrator (medium 5.4)
- [CVE-2021-29759](https://insights.sbomify.com/CVE-2021-29759/): Information disclosure in App Connect Enterprise Certified Container (medium 4.4)
- [CVE-2021-29758](https://insights.sbomify.com/CVE-2021-29758/): Missing authorization in Sterling B2B Integrator (medium 4.3)
- [CVE-2021-29757](https://insights.sbomify.com/CVE-2021-29757/): Cross-site request forgery in QRadar User Behavior Analytics (medium 4.3)
- [CVE-2021-29756](https://insights.sbomify.com/CVE-2021-29756/): Cross-site request forgery in Cognos Analytics (medium 4.3)
- [CVE-2021-29755](https://insights.sbomify.com/CVE-2021-29755/): Security feature bypass in QRadar SIEM (medium 5.9)
- [CVE-2021-29754](https://insights.sbomify.com/CVE-2021-29754/): Privilege escalation in WebSphere Application Server (medium 4.2)
- [CVE-2021-29753](https://insights.sbomify.com/CVE-2021-29753/): Information disclosure in Business Automation Workflow (medium 5.9)
- [CVE-2021-29752](https://insights.sbomify.com/CVE-2021-29752/): Information disclosure in DB2 for Linux, UNIX and Windows (medium 4.4)
- [CVE-2021-29751](https://insights.sbomify.com/CVE-2021-29751/): Information disclosure in Business Automation Workflow (low 3.1)
- [CVE-2021-29750](https://insights.sbomify.com/CVE-2021-29750/): Weak cryptography in QRadar SIEM (medium 5.9)
- [CVE-2021-29749](https://insights.sbomify.com/CVE-2021-29749/): Server-side request forgery in Secure External Authentication Server (medium 6.5)
- [CVE-2021-29747](https://insights.sbomify.com/CVE-2021-29747/): Auth bypass in InfoSphere Information Server (medium 5.9)
- [CVE-2021-29745](https://insights.sbomify.com/CVE-2021-29745/): Missing authorization in Cognos Analytics (medium 5.4)
- [CVE-2021-29744](https://insights.sbomify.com/CVE-2021-29744/): Cross-site scripting in Maximo Asset Management (medium 5.4)
- [CVE-2021-29743](https://insights.sbomify.com/CVE-2021-29743/): Cross-site scripting in Maximo Asset Management (medium 6.4)
- [CVE-2021-29742](https://insights.sbomify.com/CVE-2021-29742/): Auth bypass in Security Verify Access Docker (high 7.9)
- [CVE-2021-29741](https://insights.sbomify.com/CVE-2021-29741/): Privilege escalation in AIX (high 8.4)
- [CVE-2021-29740](https://insights.sbomify.com/CVE-2021-29740/): Memory corruption in Spectrum Scale (high 8.4)
- [CVE-2021-29739](https://insights.sbomify.com/CVE-2021-29739/): Information disclosure in Planning Analytics Local (low 2.7)
- [CVE-2021-29738](https://insights.sbomify.com/CVE-2021-29738/): Server-side request forgery in InfoSphere Information Server (medium 5.4)
- [CVE-2021-29737](https://insights.sbomify.com/CVE-2021-29737/): Security feature bypass in InfoSphere Information Server (medium 5.9)
- [CVE-2021-29736](https://insights.sbomify.com/CVE-2021-29736/): Privilege escalation in WebSphere Application Server (medium 5.0)
- [CVE-2021-29735](https://insights.sbomify.com/CVE-2021-29735/): Cross-site scripting in Security Guardium (medium 4.8)
- [CVE-2021-29730](https://insights.sbomify.com/CVE-2021-29730/): SQL injection in InfoSphere Information Server (medium 6.3)
- [CVE-2021-29728](https://insights.sbomify.com/CVE-2021-29728/): Hardcoded credentials in Sterling Secure Proxy (medium 4.9)
- [CVE-2021-29727](https://insights.sbomify.com/CVE-2021-29727/): Denial of service in AIX (medium 6.2)
- [CVE-2021-29726](https://insights.sbomify.com/CVE-2021-29726/): Security feature bypass in Secure External Authentication Server (medium 5.3)
- [CVE-2021-29725](https://insights.sbomify.com/CVE-2021-29725/): Denial of service in Secure External Authentication Server (high 7.5)
- [CVE-2021-29723](https://insights.sbomify.com/CVE-2021-29723/): Weak cryptography in Sterling Secure Proxy (medium 5.9)
- [CVE-2021-29722](https://insights.sbomify.com/CVE-2021-29722/): Weak cryptography in Sterling Secure Proxy (medium 5.9)
- [CVE-2021-29719](https://insights.sbomify.com/CVE-2021-29719/): Other in Cognos Analytics (medium 5.3)
- [CVE-2021-29716](https://insights.sbomify.com/CVE-2021-29716/): Missing authorization in Cognos Analytics (low 2.7)
- [CVE-2021-29715](https://insights.sbomify.com/CVE-2021-29715/): Misconfiguration in API Connect (medium 6.5)
- [CVE-2021-29714](https://insights.sbomify.com/CVE-2021-29714/): Denial of service in Content Navigator (medium 6.5)
- [CVE-2021-29713](https://insights.sbomify.com/CVE-2021-29713/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-29712](https://insights.sbomify.com/CVE-2021-29712/): Cross-site scripting in InfoSphere Information Server (medium 6.1)
- [CVE-2021-29711](https://insights.sbomify.com/CVE-2021-29711/): Missing authorization in UrbanCode Deploy (medium 4.9)
- [CVE-2021-29708](https://insights.sbomify.com/CVE-2021-29708/): Information disclosure in Spectrum Scale (medium 6.7)
- [CVE-2021-29707](https://insights.sbomify.com/CVE-2021-29707/): Privilege escalation in Power HMC (high 8.4)
- [CVE-2021-29706](https://insights.sbomify.com/CVE-2021-29706/): Information disclosure in AIX (medium 6.8)
- [CVE-2021-29704](https://insights.sbomify.com/CVE-2021-29704/): Weak cryptography in Security (medium 5.9)
- [CVE-2021-29703](https://insights.sbomify.com/CVE-2021-29703/): Denial of service in DB2 for Linux, UNIX and Windows (high 7.5)
- [CVE-2021-29702](https://insights.sbomify.com/CVE-2021-29702/): Denial of service in DB2 for Linux- UNIX and Windows (high 7.5)
- [CVE-2021-29701](https://insights.sbomify.com/CVE-2021-29701/): Information disclosure in Engineering Workflow Management (medium 4.3)
- [CVE-2021-29700](https://insights.sbomify.com/CVE-2021-29700/): Information disclosure in Sterling B2B Integrator (medium 4.3)
- [CVE-2021-29699](https://insights.sbomify.com/CVE-2021-29699/): File upload in Security Verify Access Docker (medium 6.6)
- [CVE-2021-29697](https://insights.sbomify.com/CVE-2021-29697/): Information disclosure in Cloud Pak for Security (medium 4.9)
- [CVE-2021-29696](https://insights.sbomify.com/CVE-2021-29696/): Command injection in Cloud Pak for Security (high 8.0)
- [CVE-2021-29695](https://insights.sbomify.com/CVE-2021-29695/): Path traversal in 8335-GCA (medium 4.9)
- [CVE-2021-29694](https://insights.sbomify.com/CVE-2021-29694/): Weak cryptography in Spectrum Protect Plus (medium 5.9)
- [CVE-2021-29693](https://insights.sbomify.com/CVE-2021-29693/): Denial of service in AIX (medium 4.9)
- [CVE-2021-29692](https://insights.sbomify.com/CVE-2021-29692/): Misconfiguration in Security Identity Manager (low 3.1)
- [CVE-2021-29691](https://insights.sbomify.com/CVE-2021-29691/): Hardcoded credentials in Security Identity Manager (medium 5.9)
- [CVE-2021-29688](https://insights.sbomify.com/CVE-2021-29688/): Information disclosure in Security Identity Manager (medium 5.3)
- [CVE-2021-29687](https://insights.sbomify.com/CVE-2021-29687/): Information disclosure in Security Identity Manager (low 3.7)
- [CVE-2021-29686](https://insights.sbomify.com/CVE-2021-29686/): Missing authorization in Security Identity Manager (medium 5.4)
- [CVE-2021-29683](https://insights.sbomify.com/CVE-2021-29683/): Information disclosure in Security Identity Manager (medium 5.3)
- [CVE-2021-29682](https://insights.sbomify.com/CVE-2021-29682/): Information disclosure in Security Identity Manager (medium 5.3)
- [CVE-2021-29681](https://insights.sbomify.com/CVE-2021-29681/): Information disclosure in InfoSphere Information Server (low 3.1)
- [CVE-2021-29679](https://insights.sbomify.com/CVE-2021-29679/): Code injection in Cognos Analytics (high 8.8)
- [CVE-2021-29678](https://insights.sbomify.com/CVE-2021-29678/): Missing authorization in DB2 for Linux, UNIX and Windows (high 8.7)
- [CVE-2021-29677](https://insights.sbomify.com/CVE-2021-29677/): Cross-site scripting in Security Verify Privilege Vault (medium 5.4)
- [CVE-2021-29676](https://insights.sbomify.com/CVE-2021-29676/): Other in Security Verify Privilege Vault (medium 4.6)
- [CVE-2021-29673](https://insights.sbomify.com/CVE-2021-29673/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-29672](https://insights.sbomify.com/CVE-2021-29672/): Memory corruption in Spectrum Protect for Space Management (high 8.4)
- [CVE-2021-29671](https://insights.sbomify.com/CVE-2021-29671/): Security feature bypass in Spectrum Scale (medium 4.0)
- [CVE-2021-29670](https://insights.sbomify.com/CVE-2021-29670/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-29669](https://insights.sbomify.com/CVE-2021-29669/): IBM Jazz Foundation cross-site scripting (medium 5.4)
- [CVE-2021-29668](https://insights.sbomify.com/CVE-2021-29668/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-29667](https://insights.sbomify.com/CVE-2021-29667/): Code injection in Spectrum Scale (high 7.0)
- [CVE-2021-29666](https://insights.sbomify.com/CVE-2021-29666/): Cross-site scripting in Spectrum Scale (medium 5.4)
- [CVE-2021-29665](https://insights.sbomify.com/CVE-2021-29665/): Memory corruption in Security Verify Access (critical 9.0)
- [CVE-2021-29663](https://insights.sbomify.com/CVE-2021-29663/): Cross-site scripting in course registration management system project:course registration management system (medium 4.8)
- [CVE-2021-29662](https://insights.sbomify.com/CVE-2021-29662/): Security feature bypass in data\:\ (high 7.5)
- [CVE-2021-29661](https://insights.sbomify.com/CVE-2021-29661/): Cross-site scripting in softing:opc toolbox (medium 5.4)
- [CVE-2021-29660](https://insights.sbomify.com/CVE-2021-29660/): Cross-site request forgery in softing:opc toolbox (high 8.8)
- [CVE-2021-29659](https://insights.sbomify.com/CVE-2021-29659/): Information disclosure in owncloud:owncloud server (medium 6.5)
- [CVE-2021-29658](https://insights.sbomify.com/CVE-2021-29658/): Code injection in vscode-rufo project:vscode-rufo (high 8.8)
- [CVE-2021-29657](https://insights.sbomify.com/CVE-2021-29657/): Use after free in linux:linux kernel (high 7.4)
- [CVE-2021-29656](https://insights.sbomify.com/CVE-2021-29656/): Security feature bypass in pexip:infinity connect (critical 9.8)
- [CVE-2021-29655](https://insights.sbomify.com/CVE-2021-29655/): Security feature bypass in pexip:infinity connect (critical 9.8)
- [CVE-2021-29654](https://insights.sbomify.com/CVE-2021-29654/): Deserialization in stackpath:ajaxsearchpro (high 7.2)
- [CVE-2021-29653](https://insights.sbomify.com/CVE-2021-29653/): Security feature bypass in hashicorp:vault (high 7.5)
- [CVE-2021-29652](https://insights.sbomify.com/CVE-2021-29652/): pomerium_signature is not verified in middleware in github.com/pomerium/pomerium (medium 6.1)
- [CVE-2021-29651](https://insights.sbomify.com/CVE-2021-29651/): JWT leak via Open Redirect in Programmatic access (medium 6.1)
- [CVE-2021-29650](https://insights.sbomify.com/CVE-2021-29650/): Race condition in debian:debian linux (medium 5.5)
- [CVE-2021-29649](https://insights.sbomify.com/CVE-2021-29649/): Denial of service in fedoraproject:fedora (medium 5.5)
- [CVE-2021-29648](https://insights.sbomify.com/CVE-2021-29648/): Null dereference in fedoraproject:fedora (medium 5.5)
- [CVE-2021-29647](https://insights.sbomify.com/CVE-2021-29647/): Information disclosure in debian:debian linux (medium 5.5)
- [CVE-2021-29646](https://insights.sbomify.com/CVE-2021-29646/): Memory corruption in fedoraproject:fedora (medium 5.5)
- [CVE-2021-29645](https://insights.sbomify.com/CVE-2021-29645/): Privilege escalation in hitachi:it operations director (high 7.0)
- [CVE-2021-29644](https://insights.sbomify.com/CVE-2021-29644/): Integer overflow in hitachi:it operations director (high 8.1)
- [CVE-2021-29643](https://insights.sbomify.com/CVE-2021-29643/): Cross-site scripting in paessler:prtg network monitor (medium 5.4)
- [CVE-2021-29642](https://insights.sbomify.com/CVE-2021-29642/): Information disclosure in gistpad project:gistpad (medium 5.3)
- [CVE-2021-29641](https://insights.sbomify.com/CVE-2021-29641/): File upload in rangerstudio:directus (high 8.8)
- [CVE-2021-29632](https://insights.sbomify.com/CVE-2021-29632/): Memory corruption in FreeBSD (high 7.5)
- [CVE-2021-29631](https://insights.sbomify.com/CVE-2021-29631/): Memory corruption in FreeBSD (high 7.8)
- [CVE-2021-29630](https://insights.sbomify.com/CVE-2021-29630/): Memory corruption in FreeBSD (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/176/