# CVEs published 2016-01-03

16 CVEs were published on January 3, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-4946](https://cve.now/CVE-2015-4946.md): Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before… (no CVSS)
- [CVE-2015-4962](https://cve.now/CVE-2015-4962.md): Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before… (no CVSS)
- [CVE-2015-5003](https://cve.now/CVE-2015-5003.md): The portal in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to… (no CVSS)
- [CVE-2015-5017](https://cve.now/CVE-2015-5017.md): IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 IFIX002; Maximo Asset Management… (no CVSS)
- [CVE-2015-5023](https://cve.now/CVE-2015-5023.md): SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary… (no CVSS)
- [CVE-2015-5035](https://cve.now/CVE-2015-5035.md): Cross-site scripting (XSS) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3… (no CVSS)
- [CVE-2015-5036](https://cve.now/CVE-2015-5036.md): Cross-site scripting (XSS) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3… (no CVSS)
- [CVE-2015-5037](https://cve.now/CVE-2015-5037.md): Cross-site request forgery (CSRF) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before… (no CVSS)
- [CVE-2015-5038](https://cve.now/CVE-2015-5038.md): IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 does not properly detect recursion during XML… (no CVSS)
- [CVE-2015-5051](https://cve.now/CVE-2015-5051.md): IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.2 IF1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1… (no CVSS)
- [CVE-2015-8508](https://cve.now/CVE-2015-8508.md): Cross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before… (no CVSS)
- [CVE-2015-8509](https://cve.now/CVE-2015-8509.md): Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2 does not properly… (no CVSS)
- [CVE-2015-1971](https://cve.now/CVE-2015-1971.md): Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x… (no CVSS)
- [CVE-2015-1985](https://cve.now/CVE-2015-1985.md): The queue manager on IBM MQ M2000 appliances before 8.0.0.4 allows local users to bypass an intended password requirement and read private… (no CVSS)
- [CVE-2015-2007](https://cve.now/CVE-2015-2007.md): Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.5 Patch 6 allows remote authenticated users to read… (no CVSS)
- [CVE-2016-1283](https://cve.now/CVE-2016-1283.md): The pcre\_compile2 function in pcre\_compile.c in PCRE 8.38 mishandles the… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-01-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.