# CVEs published 2016-01-18

8 CVEs were published on January 18, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-4942](https://cve.now/CVE-2015-4942.md): IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a series of connect an (no CVSS)
- [CVE-2015-4959](https://cve.now/CVE-2015-4959.md): Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP16 allows remote attackers to inject (no CVSS)
- [CVE-2015-4988](https://cve.now/CVE-2015-4988.md): Directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9 (no CVSS)
- [CVE-2015-5002](https://cve.now/CVE-2015-5002.md): Cross-site scripting (XSS) vulnerability in IBM Host On-Demand 11.0 through 11.0.14 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2015-5008](https://cve.now/CVE-2015-5008.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 (no CVSS)
- [CVE-2015-5009](https://cve.now/CVE-2015-5009.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 (no CVSS)
- [CVE-2015-7886](https://cve.now/CVE-2015-7886.md): NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain sensitive volume information vi (no CVSS)
- [CVE-2016-0201](https://cve.now/CVE-2016-0201.md): GSKit in IBM Security Network Protection 5.3.1 before 5.3.1.7 and 5.3.2 allows remote attackers to discover credentials by triggering an MD5 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-01-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.