# CVEs published 2016-01-02 27 CVEs were published on January 2, 2016: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2015-1928](https://cve.now/CVE-2015-1928.md): Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 (no CVSS) - [CVE-2015-2023](https://cve.now/CVE-2015-2023.md): Buffer overflow in IBM i Access 7.1 on Windows allows local users to gain privileges via unspecified vectors. (no CVSS) - [CVE-2015-7396](https://cve.now/CVE-2015-7396.md): The Scheduler in IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.1 FP1 and Maximo Asset Management 7.5 before 7.5.0. (no CVSS) - [CVE-2015-7400](https://cve.now/CVE-2015-7400.md): The Lotus Mashups component in IBM Mashup Center 3.0.0.1 allows remote authenticated users to cause a denial of service (CPU consumption) vi (no CVSS) - [CVE-2015-7403](https://cve.now/CVE-2015-7403.md): IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System (GPFS) 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX all (no CVSS) - [CVE-2015-7407](https://cve.now/CVE-2015-7407.md): Cross-site request forgery (CSRF) vulnerability in Lotus Mashups in IBM Mashup Center 3.0.0.1 allows remote attackers to hijack the authenti (no CVSS) - [CVE-2015-7416](https://cve.now/CVE-2015-7416.md): AFP Workbench Viewer in IBM i Access 7.1 on Windows allows remote attackers to cause a denial of service (viewer crash) via a crafted workbe (no CVSS) - [CVE-2015-7422](https://cve.now/CVE-2015-7422.md): Buffer overflow in IBM i Access 7.1 on Windows allows local users to cause a denial of service (application crash) via unspecified vectors. (no CVSS) - [CVE-2015-7426](https://cve.now/CVE-2015-7426.md): The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spec (no CVSS) - [CVE-2015-7430](https://cve.now/CVE-2015-7430.md): The Hadoop connector 1.1.1, 2.4, 2.5, and 2.7.0-0 before 2.7.0-3 for IBM Spectrum Scale and General Parallel File System (GPFS) allows local (no CVSS) - [CVE-2015-7431](https://cve.now/CVE-2015-7431.md): Cross-site scripting (XSS) vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2015-7435](https://cve.now/CVE-2015-7435.md): IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business I (no CVSS) - [CVE-2015-7436](https://cve.now/CVE-2015-7436.md): IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business I (no CVSS) - [CVE-2015-7437](https://cve.now/CVE-2015-7437.md): Queue Watcher in IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive information via unspecified vectors. (no CVSS) - [CVE-2015-7438](https://cve.now/CVE-2015-7438.md): IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access. (no CVSS) - [CVE-2015-7450](https://cve.now/CVE-2015-7450.md): Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allo (CVSS 9.8, KEV) - [CVE-2015-7452](https://cve.now/CVE-2015-7452.md): IBM Maximo Asset Management 7.5 before 7.5.0.9 FP9 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 FP9, 7.5.1, and (no CVSS) - [CVE-2015-8027](https://cve.now/CVE-2015-8027.md): Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, whic (no CVSS) - [CVE-2015-4989](https://cve.now/CVE-2015-4989.md): The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A befor (no CVSS) - [CVE-2015-4990](https://cve.now/CVE-2015-4990.md): The portal in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A befor (no CVSS) - [CVE-2015-4996](https://cve.now/CVE-2015-4996.md): IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof database servers and disco (no CVSS) - [CVE-2015-5018](https://cve.now/CVE-2015-5018.md): IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows (no CVSS) - [CVE-2015-5020](https://cve.now/CVE-2015-5020.md): The Big SQL component in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0 allows remote authenticated users to bypass intended acce (no CVSS) - [CVE-2015-7402](https://cve.now/CVE-2015-7402.md): Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1.1 allows remote authenticated users to inje (no CVSS) - [CVE-2015-7429](https://cve.now/CVE-2015-7429.md): The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spec (no CVSS) - [CVE-2015-7442](https://cve.now/CVE-2015-7442.md): consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 (no CVSS) - [CVE-2015-7451](https://cve.now/CVE-2015-7451.md): Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.9 IF2 and 7.6 before 7.6.0.3 FP3 and Maximo Asset M (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-01-02 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.