# Vulnerabilities published in 2021


- [CVE-2021-20607](https://insights.sbomify.com/CVE-2021-20607/): Integer overflow in Mitsubishi Electric GX Works2; Mitsubishi Electric MELSOFT Navigator; Mitsubishi Electric EZSocket (medium 5.5)
- [CVE-2021-20606](https://insights.sbomify.com/CVE-2021-20606/): Memory corruption in Mitsubishi Electric GX Works2; Mitsubishi Electric MELSOFT Navigator; Mitsubishi Electric EZSocket (medium 5.5)
- [CVE-2021-20601](https://insights.sbomify.com/CVE-2021-20601/): Other in GOT2000 series GT27 model; GOT2000 series GT25 model; GOT2000 series GT23 model; GOT2000 series GT21 model; GOT SIMPLE series GS21 model; GT SoftGOT2000 (high 7.5)
- [CVE-2021-20600](https://insights.sbomify.com/CVE-2021-20600/): Denial of service in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V (medium 5.9)
- [CVE-2021-2060](https://insights.sbomify.com/CVE-2021-2060/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-20599](https://insights.sbomify.com/CVE-2021-20599/): Information disclosure in MELSEC iQ-R Series SIL2 Process CPU R08PSFCPU (critical 9.1)
- [CVE-2021-20598](https://insights.sbomify.com/CVE-2021-20598/): Denial of service in MELSEC iQ-R series CPU modules R08/16/32/120SFCPU; R08/16/32/120PSFCPU (medium 5.3)
- [CVE-2021-20597](https://insights.sbomify.com/CVE-2021-20597/): Information disclosure in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU; Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU (critical 9.1)
- [CVE-2021-20596](https://insights.sbomify.com/CVE-2021-20596/): Null dereference in MELSEC-F Series FX3U-ENET; FX3U-ENET-L; FX3U-ENET-P502 (high 7.5)
- [CVE-2021-20595](https://insights.sbomify.com/CVE-2021-20595/): XML external entity in Air Conditioning System/Centralized Controllers G-50A; GB-50A; GB-24A; AG-150A-A; AG-150A-J; GB-50ADA-A; GB-50ADA-J; EB-50GU-A; EB-50GU-J; AE-200A; AE-200E; AE-50A; AE-50E; EW-50A; EW-50E; TE-200A; TE-50A; TW-50A; CMS-RMD-J; Air Conditioning System/Expansion Controllers PAC-YG50ECA; Air Conditioning System/BM adapter BAC-HD150 (high 8.2)
- [CVE-2021-20594](https://insights.sbomify.com/CVE-2021-20594/): Information disclosure in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU; Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU (high 7.5)
- [CVE-2021-20593](https://insights.sbomify.com/CVE-2021-20593/): Auth bypass in Air Conditioning System/Centralized Controllers G-50A; GB-50A; AG-150A-A; AG-150A-J; GB-50ADA-A; GB-50ADA-J; EB-50GU-A; EB-50GU-J; AE-200A; AE-200E; AE-50A; AE-50E; EW-50A; EW-50E; TE-200A; TE-50A; TW-50A; CMS-RMD-J; Air Conditioning System/Expansion Controllers PAC-YG50ECA (high 7.1)
- [CVE-2021-20592](https://insights.sbomify.com/CVE-2021-20592/): Denial of service in GOT2000 series GT27 model; GT25 model; GT23 model; GT SoftGOT2000 (high 7.5)
- [CVE-2021-20591](https://insights.sbomify.com/CVE-2021-20591/): Denial of service in MELSEC iQ-R series CPU modules (high 7.5)
- [CVE-2021-20590](https://insights.sbomify.com/CVE-2021-20590/): Auth bypass in GOT SIMPLE series GS21 model GS2107-WTBD-N (high 7.5)
- [CVE-2021-2059](https://insights.sbomify.com/CVE-2021-2059/): Information disclosure in iStore (medium 5.3)
- [CVE-2021-20589](https://insights.sbomify.com/CVE-2021-20589/): Memory corruption in GOT2000 series; GOT SIMPLE series; GT SoftGOT2000; Tension Controller (high 7.5)
- [CVE-2021-20588](https://insights.sbomify.com/CVE-2021-20588/): Memory corruption in CPU Module Logging Configuration Tool (high 7.5)
- [CVE-2021-20587](https://insights.sbomify.com/CVE-2021-20587/): Memory corruption in CPU Module Logging Configuration Tool (high 7.5)
- [CVE-2021-20586](https://insights.sbomify.com/CVE-2021-20586/): Denial of service in Robot Controller MELFA FR Series; Robot Controller CR Series; Cooperative Robot ASSISTA (high 7.5)
- [CVE-2021-20585](https://insights.sbomify.com/CVE-2021-20585/): Information disclosure in Security Verify Access (medium 5.3)
- [CVE-2021-20584](https://insights.sbomify.com/CVE-2021-20584/): File upload in Sterling File Gateway (medium 6.5)
- [CVE-2021-20583](https://insights.sbomify.com/CVE-2021-20583/): Information disclosure in Security Verify Privilege Vault (medium 6.2)
- [CVE-2021-20582](https://insights.sbomify.com/CVE-2021-20582/): Information disclosure in Security Secret Server (low 3.7)
- [CVE-2021-20581](https://insights.sbomify.com/CVE-2021-20581/): IBM Security Verify Privilege information disclosure (medium 5.3)
- [CVE-2021-20580](https://insights.sbomify.com/CVE-2021-20580/): Cross-site request forgery in Planning Analytics (medium 4.3)
- [CVE-2021-2058](https://insights.sbomify.com/CVE-2021-2058/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-20579](https://insights.sbomify.com/CVE-2021-20579/): Information disclosure in DB2 for Linux, UNIX and Windows (medium 5.9)
- [CVE-2021-20578](https://insights.sbomify.com/CVE-2021-20578/): Auth bypass in Cloud Pak for Security (medium 5.4)
- [CVE-2021-20577](https://insights.sbomify.com/CVE-2021-20577/): Cross-site scripting in Cloud Pak for Security (medium 4.3)
- [CVE-2021-20576](https://insights.sbomify.com/CVE-2021-20576/): Denial of service in Security Verify Access (high 7.5)
- [CVE-2021-20575](https://insights.sbomify.com/CVE-2021-20575/): Information disclosure in Security Verify Access (medium 4.0)
- [CVE-2021-20574](https://insights.sbomify.com/CVE-2021-20574/): Other in Security Identity Manager Adapters (high 7.5)
- [CVE-2021-20573](https://insights.sbomify.com/CVE-2021-20573/): Memory corruption in Security Identity Manager Adapters (medium 6.5)
- [CVE-2021-20572](https://insights.sbomify.com/CVE-2021-20572/): Memory corruption in Security Identity Manager Adapters (medium 6.5)
- [CVE-2021-20571](https://insights.sbomify.com/CVE-2021-20571/): Cross-site scripting in Sterling B2B Integrator (medium 4.9)
- [CVE-2021-2057](https://insights.sbomify.com/CVE-2021-2057/): Other in Retail Customer Management and Segmentation Foundation (medium 6.3)
- [CVE-2021-20569](https://insights.sbomify.com/CVE-2021-20569/): Information disclosure in Security Secret Server (medium 5.3)
- [CVE-2021-20567](https://insights.sbomify.com/CVE-2021-20567/): Information disclosure in Resilient SOAR (medium 4.4)
- [CVE-2021-20566](https://insights.sbomify.com/CVE-2021-20566/): Weak cryptography in Resilient SOAR (medium 5.9)
- [CVE-2021-20565](https://insights.sbomify.com/CVE-2021-20565/): Security feature bypass in Cloud Pak for Security (medium 4.6)
- [CVE-2021-20564](https://insights.sbomify.com/CVE-2021-20564/): Misconfiguration in Cloud Pak for Security (medium 5.9)
- [CVE-2021-20563](https://insights.sbomify.com/CVE-2021-20563/): Information disclosure in Sterling File Gateway (medium 4.3)
- [CVE-2021-20562](https://insights.sbomify.com/CVE-2021-20562/): Cross-site scripting in Sterling B2B Integrator (medium 5.4)
- [CVE-2021-20561](https://insights.sbomify.com/CVE-2021-20561/): Cross-site scripting in Sterling File Gateway (medium 5.4)
- [CVE-2021-20560](https://insights.sbomify.com/CVE-2021-20560/): Other in Sterling Connect:Direct Browser User Interface (medium 5.4)
- [CVE-2021-2056](https://insights.sbomify.com/CVE-2021-2056/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2021-20559](https://insights.sbomify.com/CVE-2021-20559/): Cross-site scripting in Control Desk (medium 5.4)
- [CVE-2021-20557](https://insights.sbomify.com/CVE-2021-20557/): Command injection in Security Guardium (high 7.2)
- [CVE-2021-20556](https://insights.sbomify.com/CVE-2021-20556/): IBM Cognos Controller information disclosure (medium 5.3)
- [CVE-2021-20554](https://insights.sbomify.com/CVE-2021-20554/): Cross-site scripting in Sterling Order Management (medium 6.1)
- [CVE-2021-20553](https://insights.sbomify.com/CVE-2021-20553/): IBM Sterling B2B Integrator Standard Edition cross-site scripting (medium 5.4)
- [CVE-2021-20552](https://insights.sbomify.com/CVE-2021-20552/): Information disclosure in Sterling File Gateway (medium 4.3)
- [CVE-2021-20551](https://insights.sbomify.com/CVE-2021-20551/): Information disclosure in Jazz Team Server (medium 4.0)
- [CVE-2021-20550](https://insights.sbomify.com/CVE-2021-20550/): Cross-site scripting in Content Navigator (medium 5.4)
- [CVE-2021-2055](https://insights.sbomify.com/CVE-2021-2055/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-20549](https://insights.sbomify.com/CVE-2021-20549/): Cross-site scripting in Content Navigator (medium 5.4)
- [CVE-2021-20546](https://insights.sbomify.com/CVE-2021-20546/): Memory corruption in Spectrum Protect for Space Management (medium 6.2)
- [CVE-2021-20544](https://insights.sbomify.com/CVE-2021-20544/): Server-side request forgery in Jazz Team Server (medium 5.4)
- [CVE-2021-20543](https://insights.sbomify.com/CVE-2021-20543/): Cross-site scripting in Jazz Team Server (medium 5.4)
- [CVE-2021-20541](https://insights.sbomify.com/CVE-2021-20541/): Information disclosure in Cloud Pak for Security (low 3.7)
- [CVE-2021-20540](https://insights.sbomify.com/CVE-2021-20540/): Information disclosure in Cloud Pak for Security (low 2.7)
- [CVE-2021-2054](https://insights.sbomify.com/CVE-2021-2054/): Other in Database - Enterprise Edition (high 7.2)
- [CVE-2021-20539](https://insights.sbomify.com/CVE-2021-20539/): Information disclosure in Cloud Pak for Security (medium 5.3)
- [CVE-2021-20538](https://insights.sbomify.com/CVE-2021-20538/): Missing authorization in Cloud Pak for Security (medium 4.8)
- [CVE-2021-20537](https://insights.sbomify.com/CVE-2021-20537/): Hardcoded credentials in Security Verify Access Docker (medium 6.5)
- [CVE-2021-20536](https://insights.sbomify.com/CVE-2021-20536/): Information disclosure in Spectrum Protect Plus (medium 6.2)
- [CVE-2021-20535](https://insights.sbomify.com/CVE-2021-20535/): Server-side request forgery in Jazz Reporting Service (medium 6.5)
- [CVE-2021-20534](https://insights.sbomify.com/CVE-2021-20534/): Open redirect in Security Verify Access Docker (medium 4.5)
- [CVE-2021-20533](https://insights.sbomify.com/CVE-2021-20533/): Command injection in Security Verify Access Docker (high 8.4)
- [CVE-2021-20532](https://insights.sbomify.com/CVE-2021-20532/): Privilege escalation in Spectrum Protect for Virtual Environments (high 7.4)
- [CVE-2021-2053](https://insights.sbomify.com/CVE-2021-2053/): Cross-site scripting in Enterprise Manager Base Platform (medium 6.1)
- [CVE-2021-20529](https://insights.sbomify.com/CVE-2021-20529/): Information disclosure in Control Center (medium 5.3)
- [CVE-2021-20528](https://insights.sbomify.com/CVE-2021-20528/): Cross-site scripting in Control Center (medium 5.4)
- [CVE-2021-20527](https://insights.sbomify.com/CVE-2021-20527/): Command injection in Resilient OnPrem (medium 6.0)
- [CVE-2021-20526](https://insights.sbomify.com/CVE-2021-20526/): Misconfiguration in Planning Analytics (low 3.7)
- [CVE-2021-20524](https://insights.sbomify.com/CVE-2021-20524/): Cross-site scripting in Security Verify Access Docker (medium 4.8)
- [CVE-2021-20523](https://insights.sbomify.com/CVE-2021-20523/): Information disclosure in Security Verify Access Docker (low 2.7)
- [CVE-2021-20520](https://insights.sbomify.com/CVE-2021-20520/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-2052](https://insights.sbomify.com/CVE-2021-2052/): Information disclosure in JD Edwards EnterpriseOne Orchestrator (medium 5.8)
- [CVE-2021-20519](https://insights.sbomify.com/CVE-2021-20519/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-20518](https://insights.sbomify.com/CVE-2021-20518/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-20517](https://insights.sbomify.com/CVE-2021-20517/): Path traversal in WebSphere Application Server ND (medium 6.4)
- [CVE-2021-20515](https://insights.sbomify.com/CVE-2021-20515/): Memory corruption in Informix Dynamic Server (medium 6.7)
- [CVE-2021-20511](https://insights.sbomify.com/CVE-2021-20511/): Path traversal in Security Verify Access Docker (medium 5.2)
- [CVE-2021-20510](https://insights.sbomify.com/CVE-2021-20510/): Information disclosure in Security Verify Access Docker (medium 6.8)
- [CVE-2021-2051](https://insights.sbomify.com/CVE-2021-2051/): Other in BI Publisher (formerly XML Publisher) (high 7.6)
- [CVE-2021-20509](https://insights.sbomify.com/CVE-2021-20509/): Code injection in Maximo Asset Management (high 7.0)
- [CVE-2021-20508](https://insights.sbomify.com/CVE-2021-20508/): Information disclosure in Security Secret Server (low 2.7)
- [CVE-2021-20507](https://insights.sbomify.com/CVE-2021-20507/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-20506](https://insights.sbomify.com/CVE-2021-20506/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-20505](https://insights.sbomify.com/CVE-2021-20505/): Weak cryptography in PowerVM Hypervisor (medium 4.4)
- [CVE-2021-20504](https://insights.sbomify.com/CVE-2021-20504/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-20503](https://insights.sbomify.com/CVE-2021-20503/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-20502](https://insights.sbomify.com/CVE-2021-20502/): XML external entity in Engineering Lifecycle Optimization (high 7.1)
- [CVE-2021-20501](https://insights.sbomify.com/CVE-2021-20501/): Misconfiguration in i (medium 5.9)
- [CVE-2021-20500](https://insights.sbomify.com/CVE-2021-20500/): Information disclosure in Security Verify Access Docker (medium 4.4)
- [CVE-2021-2050](https://insights.sbomify.com/CVE-2021-2050/): Other in BI Publisher (formerly XML Publisher) (high 7.6)
- [CVE-2021-20499](https://insights.sbomify.com/CVE-2021-20499/): Information disclosure in Security Verify Access Docker (low 2.7)
- [CVE-2021-20498](https://insights.sbomify.com/CVE-2021-20498/): Information disclosure in Security Verify Access Docker (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/246/