# Vulnerabilities published in 2022


- [CVE-2022-22503](https://insights.sbomify.com/CVE-2022-22503/): Other in Robotic Process Automation (medium 6.1)
- [CVE-2022-22502](https://insights.sbomify.com/CVE-2022-22502/): Cross-site scripting in Robotic Process Automation (medium 5.4)
- [CVE-2022-2250](https://insights.sbomify.com/CVE-2022-2250/): Open redirect in GitLab (medium 4.7)
- [CVE-2022-22497](https://insights.sbomify.com/CVE-2022-22497/): Weak cryptography in Aspera Faspex (high 7.5)
- [CVE-2022-22496](https://insights.sbomify.com/CVE-2022-22496/): Weak cryptography in Spectrum Protect Server (medium 5.3)
- [CVE-2022-22495](https://insights.sbomify.com/CVE-2022-22495/): SQL injection in i (medium 6.3)
- [CVE-2022-22494](https://insights.sbomify.com/CVE-2022-22494/): Information disclosure in Spectrum Protect Operations Center (low 3.7)
- [CVE-2022-22493](https://insights.sbomify.com/CVE-2022-22493/): Cross-site request forgery in WebSphere Automation for Cloud Pak for Watson AIOps (low 3.5)
- [CVE-2022-22491](https://insights.sbomify.com/CVE-2022-22491/): IBM App Connect Enterprise Certified Container denial of service (medium 5.5)
- [CVE-2022-22490](https://insights.sbomify.com/CVE-2022-22490/): Information disclosure in Robotic Process Automation (medium 4.4)
- [CVE-2022-2249](https://insights.sbomify.com/CVE-2022-2249/): Avaya Aura Communication Manager Privilege Escalation Vulnerabilities (high 7.7)
- [CVE-2022-22489](https://insights.sbomify.com/CVE-2022-22489/): XML external entity in MQ (high 8.2)
- [CVE-2022-22488](https://insights.sbomify.com/CVE-2022-22488/): IBM OpenBMC denial of service (medium 4.9)
- [CVE-2022-22487](https://insights.sbomify.com/CVE-2022-22487/): Auth bypass in Spectrum Protect Server (medium 5.9)
- [CVE-2022-22486](https://insights.sbomify.com/CVE-2022-22486/): IBM Tivoli Workload Scheduler XML external entity injection (critical 10.0)
- [CVE-2022-22485](https://insights.sbomify.com/CVE-2022-22485/): Auth bypass in Spectrum Protect Server (medium 5.9)
- [CVE-2022-22484](https://insights.sbomify.com/CVE-2022-22484/): Information disclosure in Spectrum Protect Operations Center (medium 5.1)
- [CVE-2022-22483](https://insights.sbomify.com/CVE-2022-22483/): Privilege escalation in DB2 for Linux, UNIX and Windows (medium 6.5)
- [CVE-2022-22482](https://insights.sbomify.com/CVE-2022-22482/): File upload in Sterling B2B Integrator (medium 6.5)
- [CVE-2022-22481](https://insights.sbomify.com/CVE-2022-22481/): Auth bypass in i (low 3.7)
- [CVE-2022-22480](https://insights.sbomify.com/CVE-2022-22480/): Information disclosure in QRadar SIEM (medium 5.3)
- [CVE-2022-22479](https://insights.sbomify.com/CVE-2022-22479/): Cross-site request forgery in Spectrum Copy Data Management (medium 5.0)
- [CVE-2022-22478](https://insights.sbomify.com/CVE-2022-22478/): Information disclosure in Spectrum Protect Client (medium 6.2)
- [CVE-2022-22477](https://insights.sbomify.com/CVE-2022-22477/): Cross-site scripting in WebSphere Application Server (medium 6.1)
- [CVE-2022-22476](https://insights.sbomify.com/CVE-2022-22476/): Auth bypass in WebSphere Application Server Liberty (medium 5.0)
- [CVE-2022-22475](https://insights.sbomify.com/CVE-2022-22475/): Auth bypass in WebSphere Application Server Liberty (medium 5.0)
- [CVE-2022-22474](https://insights.sbomify.com/CVE-2022-22474/): Denial of service in Spectrum Protect Client (medium 5.9)
- [CVE-2022-22473](https://insights.sbomify.com/CVE-2022-22473/): Information disclosure in WebSphere Application Server (low 3.7)
- [CVE-2022-22472](https://insights.sbomify.com/CVE-2022-22472/): Information disclosure in Spectrum Protect Plus (medium 6.0)
- [CVE-2022-22470](https://insights.sbomify.com/CVE-2022-22470/): IBM Security Verify Governance information disclosure (medium 4.1)
- [CVE-2022-22466](https://insights.sbomify.com/CVE-2022-22466/): IBM Security Verify Governance information disclosure (medium 6.8)
- [CVE-2022-22465](https://insights.sbomify.com/CVE-2022-22465/): Privilege escalation in Security Verify Access (medium 6.3)
- [CVE-2022-22464](https://insights.sbomify.com/CVE-2022-22464/): Weak cryptography in Security Verify Access (medium 5.9)
- [CVE-2022-22463](https://insights.sbomify.com/CVE-2022-22463/): SQL injection in Security Verify Access (medium 5.4)
- [CVE-2022-22462](https://insights.sbomify.com/CVE-2022-22462/): IBM Security Verify Governance, Identity Manager virtual appliance component information disclosure (low 3.7)
- [CVE-2022-22461](https://insights.sbomify.com/CVE-2022-22461/): IBM Security Verify Governance, Identity Manager information disclosure (medium 5.9)
- [CVE-2022-22460](https://insights.sbomify.com/CVE-2022-22460/): Information disclosure in Security Verify Governance (low 3.0)
- [CVE-2022-22458](https://insights.sbomify.com/CVE-2022-22458/): IBM Security Verify Governance, Identity Manager information disclosure (medium 6.3)
- [CVE-2022-22457](https://insights.sbomify.com/CVE-2022-22457/): IBM Security Verify Governance, Identity Manager information disclosure (medium 5.3)
- [CVE-2022-22456](https://insights.sbomify.com/CVE-2022-22456/): IBM Security Verify Governance, Identity Manager cross-site scripting (medium 4.2)
- [CVE-2022-22455](https://insights.sbomify.com/CVE-2022-22455/): Privilege escalation in Security Verify Governance (low 2.3)
- [CVE-2022-22454](https://insights.sbomify.com/CVE-2022-22454/): Command injection in InfoSphere Information Server (medium 5.9)
- [CVE-2022-22453](https://insights.sbomify.com/CVE-2022-22453/): Weak cryptography in Security Verify Governance (medium 5.1)
- [CVE-2022-22452](https://insights.sbomify.com/CVE-2022-22452/): Auth bypass in Security Verify Governance (medium 5.3)
- [CVE-2022-22450](https://insights.sbomify.com/CVE-2022-22450/): File upload in Security Verify Governance (low 3.8)
- [CVE-2022-2245](https://insights.sbomify.com/CVE-2022-2245/): Counter Box < 1.2.1 - Arbitrary Counter Activation/Deactivation via CSRF (high 8.8)
- [CVE-2022-22449](https://insights.sbomify.com/CVE-2022-22449/): IBM Security Verify Governance, Identity Manager information disclosure (medium 5.3)
- [CVE-2022-22447](https://insights.sbomify.com/CVE-2022-22447/): IBM Disconnected Log Collector information disclosure (medium 4.0)
- [CVE-2022-22445](https://insights.sbomify.com/CVE-2022-22445/): Other in PowerVM Hypervisor (high 7.6)
- [CVE-2022-22444](https://insights.sbomify.com/CVE-2022-22444/): Denial of service in AIX (medium 6.2)
- [CVE-2022-22443](https://insights.sbomify.com/CVE-2022-22443/): Cross-site scripting in InfoSphere Information Server (medium 5.4)
- [CVE-2022-22442](https://insights.sbomify.com/CVE-2022-22442/): Missing authorization in IBM InfoSphere Information Server (medium 6.5)
- [CVE-2022-22441](https://insights.sbomify.com/CVE-2022-22441/): Privilege escalation in InfoSphere Information Server (medium 6.5)
- [CVE-2022-2244](https://insights.sbomify.com/CVE-2022-2244/): Missing authorization in GitLab (medium 4.3)
- [CVE-2022-22436](https://insights.sbomify.com/CVE-2022-22436/): Cross-site scripting in Maximo Asset Management (medium 5.4)
- [CVE-2022-22435](https://insights.sbomify.com/CVE-2022-22435/): Cross-site scripting in Maximo Asset Management (medium 5.4)
- [CVE-2022-22434](https://insights.sbomify.com/CVE-2022-22434/): Missing authorization in Robotic Process Automation (medium 4.2)
- [CVE-2022-22433](https://insights.sbomify.com/CVE-2022-22433/): Server-side request forgery in Robotic Process Automation (low 2.7)
- [CVE-2022-2243](https://insights.sbomify.com/CVE-2022-2243/): Missing authorization in GitLab (medium 5.0)
- [CVE-2022-22427](https://insights.sbomify.com/CVE-2022-22427/): Cross-site scripting in InfoSphere Information Server (medium 5.2)
- [CVE-2022-22426](https://insights.sbomify.com/CVE-2022-22426/): Auth bypass in Spectrum Copy Data Management (low 2.9)
- [CVE-2022-22425](https://insights.sbomify.com/CVE-2022-22425/): Code injection in IBM InfoSphere Information Server (critical 9.8)
- [CVE-2022-22424](https://insights.sbomify.com/CVE-2022-22424/): Misconfiguration in QRadar SIEM (medium 5.1)
- [CVE-2022-22423](https://insights.sbomify.com/CVE-2022-22423/): Denial of service in CCA for MTM 4767 (medium 6.5)
- [CVE-2022-2242](https://insights.sbomify.com/CVE-2022-2242/): KUKA V/KSS WoV SH access control vulnerability (critical 9.8)
- [CVE-2022-22417](https://insights.sbomify.com/CVE-2022-22417/): Cross-site scripting in Sterling Partner Engagement Manager (medium 5.4)
- [CVE-2022-22416](https://insights.sbomify.com/CVE-2022-22416/): Server-side request forgery in Sterling Partner Engagement Manager (medium 5.4)
- [CVE-2022-22415](https://insights.sbomify.com/CVE-2022-22415/): Missing authorization in Robotic Process Automation (medium 4.3)
- [CVE-2022-22414](https://insights.sbomify.com/CVE-2022-22414/): Information disclosure in Robotic Process Automation (medium 5.1)
- [CVE-2022-22413](https://insights.sbomify.com/CVE-2022-22413/): SQL injection in Robotic Process Automation (medium 4.2)
- [CVE-2022-22412](https://insights.sbomify.com/CVE-2022-22412/): Information disclosure in Robotic Process Automation (medium 4.2)
- [CVE-2022-22411](https://insights.sbomify.com/CVE-2022-22411/): Misconfiguration in Spectrum Scale DAS (medium 6.3)
- [CVE-2022-22410](https://insights.sbomify.com/CVE-2022-22410/): Information disclosure in Watson Query (low 3.9)
- [CVE-2022-2241](https://insights.sbomify.com/CVE-2022-2241/): Featured Image from URL < 4.0.0 - Arbitrary Settings Update to Stored XSS via CSRF (medium 6.1)
- [CVE-2022-22409](https://insights.sbomify.com/CVE-2022-22409/): IBM Aspera Faspex information disclosure (medium 5.3)
- [CVE-2022-22405](https://insights.sbomify.com/CVE-2022-22405/): IBM Aspera Faspex information disclosure (medium 5.9)
- [CVE-2022-22404](https://insights.sbomify.com/CVE-2022-22404/): Denial of service in App Connect Enterprise Certified Container (medium 6.5)
- [CVE-2022-22402](https://insights.sbomify.com/CVE-2022-22402/): IBM Aspera Faspex cross-site scripting (medium 5.4)
- [CVE-2022-22401](https://insights.sbomify.com/CVE-2022-22401/): IBM Aspera Faspex information disclosure (medium 5.9)
- [CVE-2022-2240](https://insights.sbomify.com/CVE-2022-2240/): Request a Quote <= 2.3.7 - CSV Injection (high 8.8)
- [CVE-2022-22399](https://insights.sbomify.com/CVE-2022-22399/): IBM Aspera Faspex HTTP header injection (medium 5.4)
- [CVE-2022-22396](https://insights.sbomify.com/CVE-2022-22396/): Information disclosure in Spectrum Protect Plus (medium 6.8)
- [CVE-2022-22394](https://insights.sbomify.com/CVE-2022-22394/): Auth bypass in Spectrum Protect Server (high 7.5)
- [CVE-2022-22393](https://insights.sbomify.com/CVE-2022-22393/): Information disclosure in WebSphere Application Server Liberty (low 3.1)
- [CVE-2022-22392](https://insights.sbomify.com/CVE-2022-22392/): File upload in Planning Analytics Workspace (medium 6.8)
- [CVE-2022-22391](https://insights.sbomify.com/CVE-2022-22391/): Information disclosure in Aspera High-Speed Transfer Endpoint (medium 4.3)
- [CVE-2022-22390](https://insights.sbomify.com/CVE-2022-22390/): Privilege escalation in DB2 for Linux, UNIX and Windows (medium 6.2)
- [CVE-2022-2239](https://insights.sbomify.com/CVE-2022-2239/): Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-22389](https://insights.sbomify.com/CVE-2022-22389/): Denial of service in DB2 for Linux, UNIX and Windows (medium 6.5)
- [CVE-2022-22387](https://insights.sbomify.com/CVE-2022-22387/): Cross-site scripting in Application Gateway (medium 5.4)
- [CVE-2022-22386](https://insights.sbomify.com/CVE-2022-22386/): IBM Security Verify Privilege information disclosure (medium 5.3)
- [CVE-2022-22385](https://insights.sbomify.com/CVE-2022-22385/): IBM Security Verify Privilege information disclosure (medium 5.9)
- [CVE-2022-22384](https://insights.sbomify.com/CVE-2022-22384/): IBM Security Verify Privilege improper input validation (medium 4.3)
- [CVE-2022-22380](https://insights.sbomify.com/CVE-2022-22380/): IBM Security Verify Privilege improper authentication (medium 5.0)
- [CVE-2022-2238](https://insights.sbomify.com/CVE-2022-2238/): Denial of service in Red Hat Advanced Cluster Management for Kubernetes (medium 6.5)
- [CVE-2022-22377](https://insights.sbomify.com/CVE-2022-22377/): IBM Security Verify Privilege information disclosure (medium 5.3)
- [CVE-2022-22375](https://insights.sbomify.com/CVE-2022-22375/): IBM Security Verify Privilege command execution (high 7.2)
- [CVE-2022-22374](https://insights.sbomify.com/CVE-2022-22374/): Security feature bypass in Power 9 AC922 (medium 6.5)
- [CVE-2022-22373](https://insights.sbomify.com/CVE-2022-22373/): Information disclosure in InfoSphere Information Server (medium 4.6)
- [CVE-2022-22371](https://insights.sbomify.com/CVE-2022-22371/): IBM Sterling B2B Integrator Standard Edition session fixation (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/391/