Planning Analytics Local (Ibm) - vulnerabilities (CVEs)

34 CVEs, 0 in the last 30 days, 31 known versions, newest CVE from 2026-08-13. Vendor: Ibm.

CVEs of Planning Analytics Local

CVE-2026-13365 - CVSS 7.1 (high), 2026-08-13: IBM Planning Analytics 2.0, and 2.1 Local is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized…
CVE-2026-10545 - CVSS 7.5 (high), 2026-07-30: IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites…
CVE-2026-1267 - CVSS 6.5 (medium), 2026-03-17: IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and administrative functionalities due to…
CVE-2025-14806 - CVSS 5.7 (medium), 2026-03-17: IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an attacker to trick the caching mechanism into storing and serving sensitive, user-specific…
CVE-2025-36437 - CVSS 4.3 (medium), 2025-12-09: IBM Planning Analytics Local 2.1.0 - 2.1.15 could disclose sensitive information about server architecture that could aid in further attacks against the system.
CVE-2025-36299 - CVSS 4.3 (medium), 2025-11-17: IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further attacks against the system.
CVE-2025-36357 - CVSS 8 (high), 2025-11-17: IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system. An attacker could send a…
CVE-2025-36262 - CVSS 4.9 (medium), 2025-09-30: IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 could allow a malicious privileged user to bypass the UI to gain unauthorized…
CVE-2025-36132 - CVSS 5.4 (medium), 2025-09-30: IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 is vulnerable to cross-site scripting. This vulnerability allows an authenticated…
CVE-2025-25044 - CVSS 5.4 (medium), 2025-06-01: IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript…
CVE-2025-33005 - CVSS 8.8 (high), 2025-06-01: IBM Planning Analytics Local 2.0 and 2.1 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the…
CVE-2025-33004 - CVSS 6.5 (medium), 2025-06-01: IBM Planning Analytics Local 2.0 and 2.1 could allow a privileged user to delete files from directories due to improper pathname restriction.
CVE-2025-2896 - CVSS 5.4 (medium), 2025-06-01: IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript…
CVE-2024-40693 - CVSS 8 (high), 2025-01-24: IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface.…
CVE-2024-25034 - CVSS 8.8 (high), 2025-01-24: IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the type of file in the File Manager T1 process. Attackers…
CVE-2024-35143 - CVSS 9.1 (critical), 2024-08-04: IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it…
CVE-2024-31908 - CVSS 6.4 (medium), 2024-05-31: IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…
CVE-2024-31907 - CVSS 5.4 (medium), 2024-05-31: IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
CVE-2024-31889 - CVSS 5.4 (medium), 2024-05-31: IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
CVE-2023-28520 - CVSS 6.4 (medium), 2023-05-12: IBM Planning Analytics Local 2.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
CVE-2021-29853 - CVSS 4.3 (medium), 2021-09-01: IBM Planning Analytics 2.0 could expose information that could be used to to create attacks by not validating the return values from some methods or…
CVE-2021-29852 - CVSS 5.4 (medium), 2021-09-01: IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2021-29851 - CVSS 4.3 (medium), 2021-09-01: IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527.
CVE-2021-29739 - CVSS 4.9 (medium), 2021-08-10: IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. X-Force ID:…
CVE-2020-4670 - CVSS 9.1 (critical), 2021-05-17: IBM Planning Analytics Local 2.0 connects to a Redis server. The Redis server, an in-memory data structure store, running on the remote host is not protected…
CVE-2020-4669 - CVSS 9.1 (critical), 2021-05-17: IBM Planning Analytics Local 2.0 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is…
CVE-2020-4985 - CVSS 7.5 (high), 2021-05-14: IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to accepting body parameters in a query. IBM X-Force ID: 192642.
CVE-2020-4649 - CVSS 4.3 (medium), 2020-11-03: IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user…
CVE-2020-4645 - CVSS 5.4 (medium), 2020-07-29: IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code…
CVE-2020-4644 - CVSS 6.1 (medium), 2020-07-29: IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit…
CVE-2020-4367 - CVSS 7.5 (high), 2020-06-02: IBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM…
CVE-2020-4503 - CVSS 6.1 (medium), 2020-06-02: IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2020-4431 - CVSS 5.4 (medium), 2020-06-02: IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2020-4366 - CVSS 6.1 (medium), 2020-06-02: IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2020-4360 - CVSS 5.4 (medium), 2020-06-02: IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2020-4306 - CVSS 5.4 (medium), 2020-05-29: IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…
CVE-2019-4134 - CVSS 6.1 (medium), 2019-07-02: IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2018-1676 - CVSS 6.1 (medium), 2018-07-06: IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…