# Vulnerabilities published in 2021


- [CVE-2021-20497](https://insights.sbomify.com/CVE-2021-20497/): Weak cryptography in Security Verify Access Docker (medium 5.9)
- [CVE-2021-20496](https://insights.sbomify.com/CVE-2021-20496/): Security feature bypass in Security Verify Access Docker (low 2.7)
- [CVE-2021-20494](https://insights.sbomify.com/CVE-2021-20494/): Memory corruption in Security Identity Manager Adapters (medium 6.5)
- [CVE-2021-20493](https://insights.sbomify.com/CVE-2021-20493/): Cross-site scripting in Cognos Analytics (medium 6.1)
- [CVE-2021-20492](https://insights.sbomify.com/CVE-2021-20492/): XML external entity in WebSphere Application Server (medium 6.5)
- [CVE-2021-20491](https://insights.sbomify.com/CVE-2021-20491/): Memory corruption in Spectrum Protect Server (medium 4.4)
- [CVE-2021-20490](https://insights.sbomify.com/CVE-2021-20490/): Misconfiguration in Spectrum Protect Plus (medium 4.0)
- [CVE-2021-2049](https://insights.sbomify.com/CVE-2021-2049/): Other in BI Publisher (formerly XML Publisher) (high 7.6)
- [CVE-2021-20489](https://insights.sbomify.com/CVE-2021-20489/): Cross-site request forgery in Sterling File Gateway (medium 4.3)
- [CVE-2021-20488](https://insights.sbomify.com/CVE-2021-20488/): Missing authorization in Security Identity Manager (high 7.5)
- [CVE-2021-20487](https://insights.sbomify.com/CVE-2021-20487/): Security feature bypass in Power 9 Systems (high 8.0)
- [CVE-2021-20486](https://insights.sbomify.com/CVE-2021-20486/): Information disclosure in Cloud Pak for Data (medium 5.3)
- [CVE-2021-20485](https://insights.sbomify.com/CVE-2021-20485/): Information disclosure in Sterling File Gateway (medium 4.3)
- [CVE-2021-20484](https://insights.sbomify.com/CVE-2021-20484/): Cross-site scripting in Sterling File Gateway (medium 5.4)
- [CVE-2021-20483](https://insights.sbomify.com/CVE-2021-20483/): Server-side request forgery in Security Identity Manager (medium 5.3)
- [CVE-2021-20482](https://insights.sbomify.com/CVE-2021-20482/): XML external entity in Cloud Pak for Automation (high 7.1)
- [CVE-2021-20481](https://insights.sbomify.com/CVE-2021-20481/): Cross-site scripting in Sterling File Gateway (medium 5.4)
- [CVE-2021-20480](https://insights.sbomify.com/CVE-2021-20480/): Server-side request forgery in WebSphere Application Server (medium 4.3)
- [CVE-2021-2048](https://insights.sbomify.com/CVE-2021-2048/): Other in MySQL Server (medium 5.0)
- [CVE-2021-20479](https://insights.sbomify.com/CVE-2021-20479/): Weak cryptography in Cloud Pak System (medium 5.9)
- [CVE-2021-20478](https://insights.sbomify.com/CVE-2021-20478/): Missing authorization in Cloud Pak System (medium 4.0)
- [CVE-2021-20477](https://insights.sbomify.com/CVE-2021-20477/): Cross-site scripting in Planning Analytics (medium 5.4)
- [CVE-2021-20474](https://insights.sbomify.com/CVE-2021-20474/): Missing authorization in Guardium Data Encryption (medium 6.5)
- [CVE-2021-20473](https://insights.sbomify.com/CVE-2021-20473/): Auth bypass in Sterling File Gateway (medium 6.3)
- [CVE-2021-20470](https://insights.sbomify.com/CVE-2021-20470/): Misconfiguration in Cognos Analytics (medium 5.9)
- [CVE-2021-2047](https://insights.sbomify.com/CVE-2021-2047/): Other in WebLogic Server (critical 9.8)
- [CVE-2021-20468](https://insights.sbomify.com/CVE-2021-20468/): Cross-site request forgery in Cognos Analytics (medium 4.3)
- [CVE-2021-20464](https://insights.sbomify.com/CVE-2021-20464/): XML external entity in Cognos Analytics (medium 6.5)
- [CVE-2021-20461](https://insights.sbomify.com/CVE-2021-20461/): Business logic in Cognos Analytics (medium 4.3)
- [CVE-2021-2046](https://insights.sbomify.com/CVE-2021-2046/): Denial of service in MySQL Server (medium 6.8)
- [CVE-2021-20455](https://insights.sbomify.com/CVE-2021-20455/): IBM Cognos Controller information disclosure (low 3.7)
- [CVE-2021-20454](https://insights.sbomify.com/CVE-2021-20454/): XML external entity in WebSphere Application Server (high 8.2)
- [CVE-2021-20453](https://insights.sbomify.com/CVE-2021-20453/): XML external entity in WebSphere Application Server (high 8.2)
- [CVE-2021-20451](https://insights.sbomify.com/CVE-2021-20451/): IBM Cognos Controller SQL injection (medium 6.0)
- [CVE-2021-20450](https://insights.sbomify.com/CVE-2021-20450/): IBM Cognos Controller information disclosure (medium 4.3)
- [CVE-2021-2045](https://insights.sbomify.com/CVE-2021-2045/): Denial of service in Text (low 3.1)
- [CVE-2021-20448](https://insights.sbomify.com/CVE-2021-20448/): Cross-site scripting in Content Navigator (medium 5.4)
- [CVE-2021-20447](https://insights.sbomify.com/CVE-2021-20447/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-20446](https://insights.sbomify.com/CVE-2021-20446/): Cross-site scripting in Maximo for Civil Infrastructure (medium 5.4)
- [CVE-2021-20445](https://insights.sbomify.com/CVE-2021-20445/): Information disclosure in Maximo for Civil Infrastructure (medium 6.5)
- [CVE-2021-20444](https://insights.sbomify.com/CVE-2021-20444/): Cross-site scripting in Maximo for Civil Infrastructure (medium 6.1)
- [CVE-2021-20443](https://insights.sbomify.com/CVE-2021-20443/): Supply chain in Maximo for Civil Infrastructure (medium 6.3)
- [CVE-2021-20442](https://insights.sbomify.com/CVE-2021-20442/): Hardcoded credentials in Security Verify Bridge (medium 5.9)
- [CVE-2021-20441](https://insights.sbomify.com/CVE-2021-20441/): Weak cryptography in Security Verify Bridge (medium 5.9)
- [CVE-2021-20440](https://insights.sbomify.com/CVE-2021-20440/): Business logic in API Connect (medium 6.4)
- [CVE-2021-2044](https://insights.sbomify.com/CVE-2021-2044/): Other in PeopleSoft Enterprise FIN Payables (medium 6.5)
- [CVE-2021-20439](https://insights.sbomify.com/CVE-2021-20439/): Information disclosure in Security Access Manager (high 7.5)
- [CVE-2021-20435](https://insights.sbomify.com/CVE-2021-20435/): Security feature bypass in Security Verify Bridge (low 2.5)
- [CVE-2021-20434](https://insights.sbomify.com/CVE-2021-20434/): Information disclosure in Security Verify Bridge (medium 4.1)
- [CVE-2021-20433](https://insights.sbomify.com/CVE-2021-20433/): Information disclosure in Security Guardium (medium 6.5)
- [CVE-2021-20432](https://insights.sbomify.com/CVE-2021-20432/): Misconfiguration in Spectrum Protect Plus (medium 6.5)
- [CVE-2021-20431](https://insights.sbomify.com/CVE-2021-20431/): Auth bypass in i2 Analyst's Notebook Premium (medium 4.3)
- [CVE-2021-20430](https://insights.sbomify.com/CVE-2021-20430/): Information disclosure in i2 Analyze (medium 5.3)
- [CVE-2021-2043](https://insights.sbomify.com/CVE-2021-2043/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (medium 6.1)
- [CVE-2021-20429](https://insights.sbomify.com/CVE-2021-20429/): Misconfiguration in QRadar SIEM (low 3.7)
- [CVE-2021-20428](https://insights.sbomify.com/CVE-2021-20428/): Information disclosure in Security Guardium (medium 5.3)
- [CVE-2021-20427](https://insights.sbomify.com/CVE-2021-20427/): Auth bypass in Security Guardium (medium 5.3)
- [CVE-2021-20426](https://insights.sbomify.com/CVE-2021-20426/): Hardcoded credentials in Security Guardium (medium 5.9)
- [CVE-2021-20424](https://insights.sbomify.com/CVE-2021-20424/): Information disclosure in Cloud Pak for Applications (medium 4.3)
- [CVE-2021-20423](https://insights.sbomify.com/CVE-2021-20423/): Privilege escalation in Cloud Pak for Applications (high 8.8)
- [CVE-2021-20422](https://insights.sbomify.com/CVE-2021-20422/): Information disclosure in Cloud Pak for Applications (high 7.5)
- [CVE-2021-20421](https://insights.sbomify.com/CVE-2021-20421/): Server-side request forgery in Jazz Team Server (medium 5.4)
- [CVE-2021-20420](https://insights.sbomify.com/CVE-2021-20420/): Information disclosure in Security Guardium (medium 4.3)
- [CVE-2021-2042](https://insights.sbomify.com/CVE-2021-2042/): Information disclosure in MySQL Server (low 2.3)
- [CVE-2021-20419](https://insights.sbomify.com/CVE-2021-20419/): Weak cryptography in Security Guardium (medium 6.8)
- [CVE-2021-20418](https://insights.sbomify.com/CVE-2021-20418/): Misconfiguration in Security Guardium (medium 4.7)
- [CVE-2021-20417](https://insights.sbomify.com/CVE-2021-20417/): Information disclosure in Guardium Data Encryption (medium 4.3)
- [CVE-2021-20416](https://insights.sbomify.com/CVE-2021-20416/): Misconfiguration in Guardium Data Encryption (low 3.7)
- [CVE-2021-20415](https://insights.sbomify.com/CVE-2021-20415/): Auth bypass in Guardium Data Encryption (medium 5.9)
- [CVE-2021-20414](https://insights.sbomify.com/CVE-2021-20414/): Information disclosure in Guardium Data Encryption (medium 4.4)
- [CVE-2021-20413](https://insights.sbomify.com/CVE-2021-20413/): Information disclosure in Guardium Data Encryption (medium 4.3)
- [CVE-2021-20412](https://insights.sbomify.com/CVE-2021-20412/): Hardcoded credentials in Security Verify Information Queue (medium 5.9)
- [CVE-2021-20411](https://insights.sbomify.com/CVE-2021-20411/): Auth bypass in Security Verify Information Queue (high 7.5)
- [CVE-2021-20410](https://insights.sbomify.com/CVE-2021-20410/): Information disclosure in Security Verify Information Queue (medium 5.3)
- [CVE-2021-2041](https://insights.sbomify.com/CVE-2021-2041/): Other in Business Intelligence Enterprise Edition (high 8.1)
- [CVE-2021-20409](https://insights.sbomify.com/CVE-2021-20409/): IBM Security Verify Information Queue information disclosure (medium 5.9)
- [CVE-2021-20408](https://insights.sbomify.com/CVE-2021-20408/): Information disclosure in Security Verify Information Queue (high 7.1)
- [CVE-2021-20407](https://insights.sbomify.com/CVE-2021-20407/): IBM Security Verify Information Queue information disclosure (medium 5.3)
- [CVE-2021-20406](https://insights.sbomify.com/CVE-2021-20406/): IBM Security Verify Information Queue information disclosure (low 2.2)
- [CVE-2021-20405](https://insights.sbomify.com/CVE-2021-20405/): Other in Security Verify Information Queue (low 3.1)
- [CVE-2021-20404](https://insights.sbomify.com/CVE-2021-20404/): Denial of service in Security Verify Information Queue (low 2.6)
- [CVE-2021-20403](https://insights.sbomify.com/CVE-2021-20403/): Cross-site request forgery in Security Verify Information Queue (low 3.1)
- [CVE-2021-20402](https://insights.sbomify.com/CVE-2021-20402/): Information disclosure in Security Verify Information Queue (low 2.7)
- [CVE-2021-20401](https://insights.sbomify.com/CVE-2021-20401/): Hardcoded credentials in QRadar SIEM (medium 5.9)
- [CVE-2021-20400](https://insights.sbomify.com/CVE-2021-20400/): Weak cryptography in QRadar SIEM (medium 5.9)
- [CVE-2021-2040](https://insights.sbomify.com/CVE-2021-2040/): Cross-site scripting in Argus Safety (medium 6.1)
- [CVE-2021-20399](https://insights.sbomify.com/CVE-2021-20399/): XML external entity in QRadar SIEM (high 7.1)
- [CVE-2021-20397](https://insights.sbomify.com/CVE-2021-20397/): Cross-site scripting in QRadar SIEM (medium 6.1)
- [CVE-2021-20396](https://insights.sbomify.com/CVE-2021-20396/): Information disclosure in QRadar Analyst Workflow (medium 4.0)
- [CVE-2021-20393](https://insights.sbomify.com/CVE-2021-20393/): Information disclosure in QRadar SIEM (medium 5.3)
- [CVE-2021-20392](https://insights.sbomify.com/CVE-2021-20392/): Cross-site scripting in QRadar SIEM (medium 6.1)
- [CVE-2021-20391](https://insights.sbomify.com/CVE-2021-20391/): Information disclosure in QRadar SIEM (medium 4.0)
- [CVE-2021-2039](https://insights.sbomify.com/CVE-2021-2039/): Other in Siebel Core - Server Framework (high 7.6)
- [CVE-2021-20389](https://insights.sbomify.com/CVE-2021-20389/): Information disclosure in Security Guardium (medium 5.1)
- [CVE-2021-20386](https://insights.sbomify.com/CVE-2021-20386/): Cross-site scripting in Security Guardium (medium 6.1)
- [CVE-2021-20385](https://insights.sbomify.com/CVE-2021-20385/): Command injection in Security Guardium (high 8.4)
- [CVE-2021-20380](https://insights.sbomify.com/CVE-2021-20380/): Information disclosure in Qradar Advisor (medium 5.3)
- [CVE-2021-2038](https://insights.sbomify.com/CVE-2021-2038/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2021-20379](https://insights.sbomify.com/CVE-2021-20379/): Weak cryptography in Guardium Data Encryption (medium 5.9)
- [CVE-2021-20378](https://insights.sbomify.com/CVE-2021-20378/): Auth bypass in Guardium Data Encryption (medium 6.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/247/