# CVEs published 2016-01-01

12 CVEs were published on January 1, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-7409](https://cve.now/CVE-2015-7409.md): Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.6 allows remote authenticated users to inject… (no CVSS)
- [CVE-2015-7456](https://cve.now/CVE-2015-7456.md): IBM Spectrum Scale 4.1.1 before 4.1.1.4, and 4.2.0.0, allows remote authenticated users to discover object-storage admin passwords via… (no CVSS)
- [CVE-2015-4941](https://cve.now/CVE-2015-4941.md): IBM WebSphere MQ Light 1.x before 1.0.2 mishandles abbreviated TLS handshakes, which allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2015-4943](https://cve.now/CVE-2015-4943.md): IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a series of connect… (no CVSS)
- [CVE-2015-5049](https://cve.now/CVE-2015-5049.md): SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remote… (no CVSS)
- [CVE-2015-7410](https://cve.now/CVE-2015-7410.md): The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows… (no CVSS)
- [CVE-2015-7415](https://cve.now/CVE-2015-7415.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM UrbanCode Deploy 6.0 before 6.0.1.12, 6.1 before 6.1.3.2, and 6.2 before… (no CVSS)
- [CVE-2015-7420](https://cve.now/CVE-2015-7420.md): Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via… (no CVSS)
- [CVE-2015-7421](https://cve.now/CVE-2015-7421.md): Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via… (no CVSS)
- [CVE-2015-7445](https://cve.now/CVE-2015-7445.md): IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is… (no CVSS)
- [CVE-2015-7441](https://cve.now/CVE-2015-7441.md): Remote Artifact Loader (RAL) in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through… (no CVSS)
- [CVE-2015-7489](https://cve.now/CVE-2015-7489.md): IBM SPSS Statistics 22.0.0.2 before IF10 and 23.0.0.2 before IF7 uses weak permissions (Everyone: Write) for Python scripts, which allows… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-01-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.