Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 391 of 437.
- CVE-2022-22503 Other in Robotic Process Automation
- CVE-2022-22502 Cross-site scripting in Robotic Process Automation
- CVE-2022-2250 Open redirect in GitLab
- CVE-2022-22497 Weak cryptography in Aspera Faspex
- CVE-2022-22496 Weak cryptography in Spectrum Protect Server
- CVE-2022-22495 SQL injection in i
- CVE-2022-22494 Information disclosure in Spectrum Protect Operations Center
- CVE-2022-22493 Cross-site request forgery in WebSphere Automation for Cloud Pak for Watson AIOps
- CVE-2022-22491 IBM App Connect Enterprise Certified Container denial of service
- CVE-2022-22490 Information disclosure in Robotic Process Automation
- CVE-2022-2249 Avaya Aura Communication Manager Privilege Escalation Vulnerabilities
- CVE-2022-22489 XML external entity in MQ
- CVE-2022-22488 IBM OpenBMC denial of service
- CVE-2022-22487 Auth bypass in Spectrum Protect Server
- CVE-2022-22486 IBM Tivoli Workload Scheduler XML external entity injection
- CVE-2022-22485 Auth bypass in Spectrum Protect Server
- CVE-2022-22484 Information disclosure in Spectrum Protect Operations Center
- CVE-2022-22483 Privilege escalation in DB2 for Linux, UNIX and Windows
- CVE-2022-22482 File upload in Sterling B2B Integrator
- CVE-2022-22481 Auth bypass in i
- CVE-2022-22480 Information disclosure in QRadar SIEM
- CVE-2022-22479 Cross-site request forgery in Spectrum Copy Data Management
- CVE-2022-22478 Information disclosure in Spectrum Protect Client
- CVE-2022-22477 Cross-site scripting in WebSphere Application Server
- CVE-2022-22476 Auth bypass in WebSphere Application Server Liberty
- CVE-2022-22475 Auth bypass in WebSphere Application Server Liberty
- CVE-2022-22474 Denial of service in Spectrum Protect Client
- CVE-2022-22473 Information disclosure in WebSphere Application Server
- CVE-2022-22472 Information disclosure in Spectrum Protect Plus
- CVE-2022-22470 IBM Security Verify Governance information disclosure
- CVE-2022-22466 IBM Security Verify Governance information disclosure
- CVE-2022-22465 Privilege escalation in Security Verify Access
- CVE-2022-22464 Weak cryptography in Security Verify Access
- CVE-2022-22463 SQL injection in Security Verify Access
- CVE-2022-22462 IBM Security Verify Governance, Identity Manager virtual appliance component information disclosure
- CVE-2022-22461 IBM Security Verify Governance, Identity Manager information disclosure
- CVE-2022-22460 Information disclosure in Security Verify Governance
- CVE-2022-22458 IBM Security Verify Governance, Identity Manager information disclosure
- CVE-2022-22457 IBM Security Verify Governance, Identity Manager information disclosure
- CVE-2022-22456 IBM Security Verify Governance, Identity Manager cross-site scripting
- CVE-2022-22455 Privilege escalation in Security Verify Governance
- CVE-2022-22454 Command injection in InfoSphere Information Server
- CVE-2022-22453 Weak cryptography in Security Verify Governance
- CVE-2022-22452 Auth bypass in Security Verify Governance
- CVE-2022-22450 File upload in Security Verify Governance
- CVE-2022-2245 Counter Box < 1.2.1 - Arbitrary Counter Activation/Deactivation via CSRF
- CVE-2022-22449 IBM Security Verify Governance, Identity Manager information disclosure
- CVE-2022-22447 IBM Disconnected Log Collector information disclosure
- CVE-2022-22445 Other in PowerVM Hypervisor
- CVE-2022-22444 Denial of service in AIX
- CVE-2022-22443 Cross-site scripting in InfoSphere Information Server
- CVE-2022-22442 Missing authorization in IBM InfoSphere Information Server
- CVE-2022-22441 Privilege escalation in InfoSphere Information Server
- CVE-2022-2244 Missing authorization in GitLab
- CVE-2022-22436 Cross-site scripting in Maximo Asset Management
- CVE-2022-22435 Cross-site scripting in Maximo Asset Management
- CVE-2022-22434 Missing authorization in Robotic Process Automation
- CVE-2022-22433 Server-side request forgery in Robotic Process Automation
- CVE-2022-2243 Missing authorization in GitLab
- CVE-2022-22427 Cross-site scripting in InfoSphere Information Server
- CVE-2022-22426 Auth bypass in Spectrum Copy Data Management
- CVE-2022-22425 Code injection in IBM InfoSphere Information Server
- CVE-2022-22424 Misconfiguration in QRadar SIEM
- CVE-2022-22423 Denial of service in CCA for MTM 4767
- CVE-2022-2242 KUKA V/KSS WoV SH access control vulnerability
- CVE-2022-22417 Cross-site scripting in Sterling Partner Engagement Manager
- CVE-2022-22416 Server-side request forgery in Sterling Partner Engagement Manager
- CVE-2022-22415 Missing authorization in Robotic Process Automation
- CVE-2022-22414 Information disclosure in Robotic Process Automation
- CVE-2022-22413 SQL injection in Robotic Process Automation
- CVE-2022-22412 Information disclosure in Robotic Process Automation
- CVE-2022-22411 Misconfiguration in Spectrum Scale DAS
- CVE-2022-22410 Information disclosure in Watson Query
- CVE-2022-2241 Featured Image from URL < 4.0.0 - Arbitrary Settings Update to Stored XSS via CSRF
- CVE-2022-22409 IBM Aspera Faspex information disclosure
- CVE-2022-22405 IBM Aspera Faspex information disclosure
- CVE-2022-22404 Denial of service in App Connect Enterprise Certified Container
- CVE-2022-22402 IBM Aspera Faspex cross-site scripting
- CVE-2022-22401 IBM Aspera Faspex information disclosure
- CVE-2022-2240 Request a Quote <= 2.3.7 - CSV Injection
- CVE-2022-22399 IBM Aspera Faspex HTTP header injection
- CVE-2022-22396 Information disclosure in Spectrum Protect Plus
- CVE-2022-22394 Auth bypass in Spectrum Protect Server
- CVE-2022-22393 Information disclosure in WebSphere Application Server Liberty
- CVE-2022-22392 File upload in Planning Analytics Workspace
- CVE-2022-22391 Information disclosure in Aspera High-Speed Transfer Endpoint
- CVE-2022-22390 Privilege escalation in DB2 for Linux, UNIX and Windows
- CVE-2022-2239 Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting
- CVE-2022-22389 Denial of service in DB2 for Linux, UNIX and Windows
- CVE-2022-22387 Cross-site scripting in Application Gateway
- CVE-2022-22386 IBM Security Verify Privilege information disclosure
- CVE-2022-22385 IBM Security Verify Privilege information disclosure
- CVE-2022-22384 IBM Security Verify Privilege improper input validation
- CVE-2022-22380 IBM Security Verify Privilege improper authentication
- CVE-2022-2238 Denial of service in Red Hat Advanced Cluster Management for Kubernetes
- CVE-2022-22377 IBM Security Verify Privilege information disclosure
- CVE-2022-22375 IBM Security Verify Privilege command execution
- CVE-2022-22374 Security feature bypass in Power 9 AC922
- CVE-2022-22373 Information disclosure in InfoSphere Information Server
- CVE-2022-22371 IBM Sterling B2B Integrator Standard Edition session fixation