# Vulnerabilities published in 2021


- [CVE-2021-2220](https://insights.sbomify.com/CVE-2021-2220/): Other in PeopleSoft Enterprise SCM eProcurement (medium 5.4)
- [CVE-2021-22199](https://insights.sbomify.com/CVE-2021-22199/): Cross-site scripting in GitLab (low 3.5)
- [CVE-2021-22198](https://insights.sbomify.com/CVE-2021-22198/): Missing authorization in GitLab (medium 4.3)
- [CVE-2021-22197](https://insights.sbomify.com/CVE-2021-22197/): Denial of service in GitLab (low 3.5)
- [CVE-2021-22196](https://insights.sbomify.com/CVE-2021-22196/): Cross-site scripting in GitLab (medium 6.3)
- [CVE-2021-22195](https://insights.sbomify.com/CVE-2021-22195/): Code injection in gitlab-vscode-extension (high 8.6)
- [CVE-2021-22194](https://insights.sbomify.com/CVE-2021-22194/): Information disclosure in GitLab (medium 5.7)
- [CVE-2021-22193](https://insights.sbomify.com/CVE-2021-22193/): Information disclosure in GitLab (low 3.5)
- [CVE-2021-22192](https://insights.sbomify.com/CVE-2021-22192/): Code injection in GitLab (critical 9.9)
- [CVE-2021-22191](https://insights.sbomify.com/CVE-2021-22191/): Code injection in Wireshark (medium 6.3)
- [CVE-2021-22190](https://insights.sbomify.com/CVE-2021-22190/): Path traversal in GitLab (high 8.5)
- [CVE-2021-2219](https://insights.sbomify.com/CVE-2021-2219/): Other in PeopleSoft Enterprise PT PeopleTools (high 7.4)
- [CVE-2021-22189](https://insights.sbomify.com/CVE-2021-22189/): Auth bypass in GitLab (medium 5.9)
- [CVE-2021-22188](https://insights.sbomify.com/CVE-2021-22188/): Information disclosure in GitLab (medium 5.3)
- [CVE-2021-22187](https://insights.sbomify.com/CVE-2021-22187/): Denial of service in GitLab (medium 4.3)
- [CVE-2021-22186](https://insights.sbomify.com/CVE-2021-22186/): Missing authorization in GitLab (medium 4.9)
- [CVE-2021-22185](https://insights.sbomify.com/CVE-2021-22185/): Cross-site scripting in GitLab (medium 5.4)
- [CVE-2021-22184](https://insights.sbomify.com/CVE-2021-22184/): Information disclosure in GitLab (medium 6.2)
- [CVE-2021-22183](https://insights.sbomify.com/CVE-2021-22183/): Cross-site scripting in GitLab (medium 4.1)
- [CVE-2021-22182](https://insights.sbomify.com/CVE-2021-22182/): Cross-site scripting in GitLab (low 3.5)
- [CVE-2021-22181](https://insights.sbomify.com/CVE-2021-22181/): Denial of service in GitLab (high 7.7)
- [CVE-2021-22180](https://insights.sbomify.com/CVE-2021-22180/): Missing authorization in GitLab (medium 4.3)
- [CVE-2021-2218](https://insights.sbomify.com/CVE-2021-2218/): Other in PeopleSoft Enterprise PT PeopleTools (high 8.3)
- [CVE-2021-22179](https://insights.sbomify.com/CVE-2021-22179/): Server-side request forgery in GitLab (medium 5.4)
- [CVE-2021-22178](https://insights.sbomify.com/CVE-2021-22178/): Server-side request forgery in GitLab (medium 5.0)
- [CVE-2021-22177](https://insights.sbomify.com/CVE-2021-22177/): Denial of service in GitLab (medium 4.3)
- [CVE-2021-22176](https://insights.sbomify.com/CVE-2021-22176/): Missing authorization in GitLab (medium 4.3)
- [CVE-2021-22175](https://insights.sbomify.com/CVE-2021-22175/): GitLab Server-Side Request Forgery (SSRF) (medium 6.8, exploited in the wild)
- [CVE-2021-22174](https://insights.sbomify.com/CVE-2021-22174/): Denial of service in Wireshark (low 3.7)
- [CVE-2021-22173](https://insights.sbomify.com/CVE-2021-22173/): Denial of service in Wireshark (low 3.7)
- [CVE-2021-22172](https://insights.sbomify.com/CVE-2021-22172/): Missing authorization in GitLab (medium 4.3)
- [CVE-2021-22171](https://insights.sbomify.com/CVE-2021-22171/): Auth bypass in GitLab (high 7.3)
- [CVE-2021-22170](https://insights.sbomify.com/CVE-2021-22170/): Weak cryptography in GitLab (medium 6.2)
- [CVE-2021-2217](https://insights.sbomify.com/CVE-2021-2217/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-22169](https://insights.sbomify.com/CVE-2021-22169/): Information disclosure in GitLab (medium 4.3)
- [CVE-2021-22168](https://insights.sbomify.com/CVE-2021-22168/): Denial of service in GitLab (medium 4.3)
- [CVE-2021-22167](https://insights.sbomify.com/CVE-2021-22167/): Information disclosure in GitLab (medium 5.3)
- [CVE-2021-22166](https://insights.sbomify.com/CVE-2021-22166/): Denial of service in GitLab (medium 5.3)
- [CVE-2021-22161](https://insights.sbomify.com/CVE-2021-22161/): Denial of service in openwrt:openwrt (medium 6.5)
- [CVE-2021-22160](https://insights.sbomify.com/CVE-2021-22160/): Authentication with JWT allows use of “none”-algorithm (critical 9.8)
- [CVE-2021-2216](https://insights.sbomify.com/CVE-2021-2216/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (medium 6.1)
- [CVE-2021-22159](https://insights.sbomify.com/CVE-2021-22159/): Privilege escalation in proofpoint:insider threat management (high 7.8)
- [CVE-2021-22158](https://insights.sbomify.com/CVE-2021-22158/): XML external entity in proofpoint:insider threat management (high 7.2)
- [CVE-2021-22157](https://insights.sbomify.com/CVE-2021-22157/): Cross-site scripting in proofpoint:insider threat management (medium 6.1)
- [CVE-2021-22156](https://insights.sbomify.com/CVE-2021-22156/): Integer overflow in QNX Software Development Platform (SDP), QNX OS for Medical and QNX OS for Safety (critical 9.0)
- [CVE-2021-22155](https://insights.sbomify.com/CVE-2021-22155/): Auth bypass in blackberry:workspaces server (high 8.8)
- [CVE-2021-22154](https://insights.sbomify.com/CVE-2021-22154/): Information disclosure in blackberry:unified endpoint management (medium 5.3)
- [CVE-2021-22153](https://insights.sbomify.com/CVE-2021-22153/): Code injection in blackberry:unified endpoint management (high 7.3)
- [CVE-2021-22152](https://insights.sbomify.com/CVE-2021-22152/): Denial of service in blackberry:unified endpoint management (medium 5.5)
- [CVE-2021-22151](https://insights.sbomify.com/CVE-2021-22151/): Kibana path traversal issue (low 3.1)
- [CVE-2021-22150](https://insights.sbomify.com/CVE-2021-22150/): Kibana code execution issue (medium 6.6)
- [CVE-2021-2215](https://insights.sbomify.com/CVE-2021-2215/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-22149](https://insights.sbomify.com/CVE-2021-22149/): Missing authorization in Elastic Enterprise Search (high 8.8)
- [CVE-2021-22148](https://insights.sbomify.com/CVE-2021-22148/): Missing authorization in Elastic Enterprise Search (high 8.8)
- [CVE-2021-22147](https://insights.sbomify.com/CVE-2021-22147/): Exposure of sensitive information in Elasticsearch (medium 6.5)
- [CVE-2021-22146](https://insights.sbomify.com/CVE-2021-22146/): Misconfiguration in elastic:elasticsearch (high 7.5)
- [CVE-2021-22145](https://insights.sbomify.com/CVE-2021-22145/): Generation of Error Message Containing Sensitive Information in Elasticsearch (medium 6.5)
- [CVE-2021-22144](https://insights.sbomify.com/CVE-2021-22144/): Denial of Service in Elasticsearch (medium 6.5)
- [CVE-2021-22143](https://insights.sbomify.com/CVE-2021-22143/): Elastic APM .NET Agent information disclosure (low 2.1)
- [CVE-2021-22142](https://insights.sbomify.com/CVE-2021-22142/): Kibana Reporting vulnerabilities (medium 6.6)
- [CVE-2021-22141](https://insights.sbomify.com/CVE-2021-22141/): Open redirect in Kibana (medium 6.1)
- [CVE-2021-22140](https://insights.sbomify.com/CVE-2021-22140/): XML external entity in Elastic App Search (high 7.5)
- [CVE-2021-2214](https://insights.sbomify.com/CVE-2021-2214/): Other in WebLogic Server (medium 4.4)
- [CVE-2021-22139](https://insights.sbomify.com/CVE-2021-22139/): Denial of service in Kibana (medium 6.5)
- [CVE-2021-22138](https://insights.sbomify.com/CVE-2021-22138/): Security feature bypass in Elasticsearch (low 3.7)
- [CVE-2021-22137](https://insights.sbomify.com/CVE-2021-22137/): Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch (medium 5.3)
- [CVE-2021-22136](https://insights.sbomify.com/CVE-2021-22136/): Security feature bypass in Kibana (low 3.5)
- [CVE-2021-22135](https://insights.sbomify.com/CVE-2021-22135/): API information disclosure flaw in Elasticsearch (medium 5.3)
- [CVE-2021-22134](https://insights.sbomify.com/CVE-2021-22134/): Exposure of Sensitive Information to an Unauthorized Actor (medium 4.3)
- [CVE-2021-22133](https://insights.sbomify.com/CVE-2021-22133/): Information Disclosure in go.elastic.co/apm (low 2.4)
- [CVE-2021-22132](https://insights.sbomify.com/CVE-2021-22132/): Insufficiently Protected Credentials in Elasticsearch (medium 4.8)
- [CVE-2021-22131](https://insights.sbomify.com/CVE-2021-22131/): Security feature bypass in Fortinet FortiTokenAndroid, Fortinet FortiTokeniOS, Fortinet FortiTokenWinApp (medium 6.4)
- [CVE-2021-22130](https://insights.sbomify.com/CVE-2021-22130/): Memory corruption in Fortinet FortiProxy (medium 6.7)
- [CVE-2021-2213](https://insights.sbomify.com/CVE-2021-2213/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-22129](https://insights.sbomify.com/CVE-2021-22129/): Memory corruption in Fortinet FortiMail (high 8.8)
- [CVE-2021-22128](https://insights.sbomify.com/CVE-2021-22128/): Missing authorization in Fortinet FortiProxy (high 7.1)
- [CVE-2021-22127](https://insights.sbomify.com/CVE-2021-22127/): Command injection in Fortinet FortiClientLinux (high 7.1)
- [CVE-2021-22126](https://insights.sbomify.com/CVE-2021-22126/): Hardcoded credentials in FortiWLC (medium 6.5)
- [CVE-2021-22125](https://insights.sbomify.com/CVE-2021-22125/): Command injection in Fortinet FortiSandbox (medium 6.3)
- [CVE-2021-22124](https://insights.sbomify.com/CVE-2021-22124/): Denial of service in Fortinet FortiSandbox, FortiAuthenticator (high 7.5)
- [CVE-2021-22123](https://insights.sbomify.com/CVE-2021-22123/): Command injection in Fortinet FortiWeb (high 7.6)
- [CVE-2021-22122](https://insights.sbomify.com/CVE-2021-22122/): Cross-site scripting in Fortinet FortiWeb (medium 6.1)
- [CVE-2021-2212](https://insights.sbomify.com/CVE-2021-2212/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-22119](https://insights.sbomify.com/CVE-2021-22119/): Resource Exhaustion in Spring Security (high 7.5)
- [CVE-2021-22118](https://insights.sbomify.com/CVE-2021-22118/): Improper Privilege Management in Spring Framework (high 7.8)
- [CVE-2021-22117](https://insights.sbomify.com/CVE-2021-22117/): Misconfiguration in RabbitMQ (high 7.8)
- [CVE-2021-22116](https://insights.sbomify.com/CVE-2021-22116/): Denial of service in RabbitMQ (high 7.5)
- [CVE-2021-22115](https://insights.sbomify.com/CVE-2021-22115/): Information disclosure in Cloud Control API (medium 6.5)
- [CVE-2021-22114](https://insights.sbomify.com/CVE-2021-22114/): Path Traversal in Spring-integration-zip (medium 5.3)
- [CVE-2021-22113](https://insights.sbomify.com/CVE-2021-22113/): Incorrect Authorization in Spring Cloud Netflix Zuul (medium 5.3)
- [CVE-2021-22112](https://insights.sbomify.com/CVE-2021-22112/): Privilege escalation in spring security (high 8.8)
- [CVE-2021-2211](https://insights.sbomify.com/CVE-2021-2211/): Information disclosure in WebLogic Server (medium 5.9)
- [CVE-2021-22101](https://insights.sbomify.com/CVE-2021-22101/): Denial of service in Cloud Foundry Cloud Controller (high 7.5)
- [CVE-2021-22100](https://insights.sbomify.com/CVE-2021-22100/): Denial of service in Cloud Controller (CAPI) by cloud foundry (medium 5.3)
- [CVE-2021-2210](https://insights.sbomify.com/CVE-2021-2210/): Other in Trade Management (high 8.2)
- [CVE-2021-22098](https://insights.sbomify.com/CVE-2021-22098/): Open redirect in UAA server (medium 6.1)
- [CVE-2021-22097](https://insights.sbomify.com/CVE-2021-22097/): Deserialization of Untrusted Data in Spring AMQP (medium 6.5)
- [CVE-2021-22096](https://insights.sbomify.com/CVE-2021-22096/): Improper Output Neutralization for Logs in Spring Framework (medium 4.3)
- [CVE-2021-22095](https://insights.sbomify.com/CVE-2021-22095/): Deserialization of Untrusted Data in Spring AMQP (medium 6.5)
- [CVE-2021-2209](https://insights.sbomify.com/CVE-2021-2209/): Other in Email Center (high 8.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/231/