# CVEs published 2016-01-01

12 CVEs were published on January 1, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-7409](https://cve.now/CVE-2015-7409.md): Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.6 allows remote authenticated users to inject arbitrar (no CVSS)
- [CVE-2015-7456](https://cve.now/CVE-2015-7456.md): IBM Spectrum Scale 4.1.1 before 4.1.1.4, and 4.2.0.0, allows remote authenticated users to discover object-storage admin passwords via unspe (no CVSS)
- [CVE-2015-4941](https://cve.now/CVE-2015-4941.md): IBM WebSphere MQ Light 1.x before 1.0.2 mishandles abbreviated TLS handshakes, which allows remote attackers to cause a denial of service (M (no CVSS)
- [CVE-2015-4943](https://cve.now/CVE-2015-4943.md): IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a series of connect an (no CVSS)
- [CVE-2015-5049](https://cve.now/CVE-2015-5049.md): SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remote authent (no CVSS)
- [CVE-2015-7410](https://cve.now/CVE-2015-7410.md): The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man- (no CVSS)
- [CVE-2015-7415](https://cve.now/CVE-2015-7415.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM UrbanCode Deploy 6.0 before 6.0.1.12, 6.1 before 6.1.3.2, and 6.2 before 6.2.0.2 (no CVSS)
- [CVE-2015-7420](https://cve.now/CVE-2015-7420.md): Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unk (no CVSS)
- [CVE-2015-7421](https://cve.now/CVE-2015-7421.md): Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unk (no CVSS)
- [CVE-2015-7445](https://cve.now/CVE-2015-7445.md): IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is config (no CVSS)
- [CVE-2015-7441](https://cve.now/CVE-2015-7441.md): Remote Artifact Loader (RAL) in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through 8.0.1. (no CVSS)
- [CVE-2015-7489](https://cve.now/CVE-2015-7489.md): IBM SPSS Statistics 22.0.0.2 before IF10 and 23.0.0.2 before IF7 uses weak permissions (Everyone: Write) for Python scripts, which allows lo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-01-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.