Skip to content
OpenAdvisories

Product · IBM

Planning Analytics

35 known vulnerabilities.

Planning Analytics at a glance

Last 12 months
10
Critical · all time
1
Exploited · all time
1
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 1 vulnerability September 2026: 0 vulnerabilities Sep October 2026: 9 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202690
Sep 202600
Aug 202610
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Latest advisories

  • Medium max 7.5
    WID-SEC-2026-1372 13 CVEs rev. 29

    Netty: Mehrere Schwachstellen

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Netty ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.

    IBM Red Hat SUSE Ubuntu Absolute Software
    first May 5, 2026
  • Low max 6.3
    WID-SEC-2025-2897 1 CVE rev. 27

    Apache log4j: Schwachstelle ermöglicht Offenlegung von Informationen

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache log4j ausnutzen, um Informationen offenzulegen.

    IBM HCL Software Splunk SUSE Apache
    first Dec 18, 2025
  • Medium max 7.5
    WID-SEC-2026-3047 5 CVEs 1 exploited

    IBM Planning Analytics: Mehrere Schwachstellen

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Planning Analytics ausnutzen, um einen Denial of Service Angriff durchzuführen oder Daten zu manipulieren.

    IBM Windows
  • High max 8.7
    WID-SEC-2026-1407 29 CVEs rev. 19

    IBM App Connect Enterprise Certified Container: Mehrere Schwachstellen

    Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise Certified Container ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informatio…

    IBM Red Hat SUSE Fedora Windows
    first May 6, 2026
  • Medium max 7.4
    WID-SEC-2026-1450 12 CVEs rev. 3

    IBM App Connect Enterprise (Axios): Mehrere Schwachstellen

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, wodurch weitere Angriffe möglich werden.

    IBM Windows
    first May 10, 2026
All Critical High Medium Low Exploited only Public exploit

35 results · Feed

  • High 8.8
    CVE-2026-76587

    IBM Planning Analytics Buffer Overflow

    IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.

    IBM Planning Analytics
  • High 7.1
    CVE-2026-17475

    IBM Planning Analytics Local is affected by security vulnerabilities

    IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional level access control.

    IBM Planning Analytics
  • Medium 6.4
    CVE-2026-18541

    IBM Planning Analytics Local is affected by security vulnerabilities

    IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disc…

    IBM Planning Analytics
  • High 8.8
    CVE-2026-19620

    IBM Planning Analytics Local is affected by security vulnerabilities

    IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication.

    IBM Planning Analytics
  • High 8.8
    CVE-2026-19622

    IBM Planning Analytics Local is affected by security vulnerabilities

    IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.

    IBM Planning Analytics
  • Medium 5.4
    CVE-2026-75063

    IBM Planning Analytics Local is affected by security vulnerabilities

    IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding.

    IBM Planning Analytics
  • High 7.5
    CVE-2026-75061

    IBM Planning Analytics Local is affected by security vulnerabilities

    IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.

    IBM Planning Analytics
  • High 8.2
    CVE-2026-19627

    IBM Planning Analytics Local is affected by security vulnerabilities

    IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to improper validation of file paths.

    IBM Planning Analytics
  • High 8.1
    CVE-2026-85457

    IBM Planning Analytics Local is affected by security vulnerabilities

    IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.

    IBM Planning Analytics
  • High 7.1
    CVE-2026-13365

    IBM Planning Analytics Local is affected by security vulnerabilities

    IBM Planning Analytics 2.0, and 2.1 Local is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

    IBM Planning Analytics
  • High 8.0
    CVE-2023-42017

    IBM Planning Analytics file upload

    IBM Planning Analytics Local 2.0 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicio…

    IBM Planning Analytics
  • Medium 6.5
    CVE-2022-22339

    IBM Planning Analytics 2.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacke…

    IBM Planning Analytics
  • High 7.1
    CVE-2022-22308

    IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file in…

    IBM Planning Analytics Planning Analytics Workspace
  • Medium 6.8
    CVE-2021-38873

    IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary comman…

    IBM Planning Analytics
  • Low 3.7
    CVE-2021-20526

    IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set …

    IBM Planning Analytics
  • Medium 4.3
    CVE-2021-20580

    IBM Planning Analytics 2.0 could be vulnerable to cross-site request forgery (CSRF) which could allow an attacker to ex…

    IBM Planning Analytics
  • Medium 5.4
    CVE-2021-20477

    IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

    IBM Planning Analytics
  • Medium 5.3
    CVE-2020-4562

    IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by allowing cross-window commu…

    IBM Planning Analytics
  • Medium 6.1
    CVE-2020-4882

    IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF) attack by constucting URLs from …

    IBM Planning Analytics
  • Medium 4.3
    CVE-2020-4953

    IBM Planning Analytics 2.0 could allow a remote authenticated attacker to obtain information about an organization's in…

    IBM Planning Analytics
  • Medium 5.9
    CVE-2020-4881

    IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server …

    IBM Planning Analytics
  • Medium 5.3
    CVE-2020-4873

    IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS pol…

    IBM Planning Analytics
  • Medium 4.0
    CVE-2020-4871

    IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X…

    IBM Planning Analytics
  • Medium 4.3
    CVE-2020-4764

    IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicio…

    IBM Planning Analytics
  • Medium 6.8
    CVE-2020-4653

    IBM Planning Analytics 2.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By…

    IBM Planning Analytics
  • Medium 6.5
    CVE-2020-4648

    A vulnerability exsists in IBM Planning Analytics 2.0 whereby avatars in Planning Analytics Workspace could be modified…

    IBM Planning Analytics
  • Medium 5.4
    CVE-2020-4645

    IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting. This vulnerability allows use…

    IBM Planning Analytics
  • Medium 6.1
    CVE-2020-4644

    IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the v…

    IBM Planning Analytics
  • Medium 5.9
    CVE-2020-4527

    IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set …

    IBM Planning Analytics
  • Medium 4.3
    CVE-2020-4361

    IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by disclosing private IP addre…

    IBM Planning Analytics
  • Medium 4.3
    CVE-2019-4613

    IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicio…

    IBM Planning Analytics
  • Critical 10.0
    CVE-2019-4716 Exploited Public exploit Scanner template EPSS 86%

    IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated us…

    IBM Planning Analytics
    KEV Nov 3, 2021
  • Medium 5.4
    CVE-2019-4611

    IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

    IBM Planning Analytics
  • Medium 6.3
    CVE-2019-4612

    IBM Planning Analytics 2.0 is vulnerable to malicious file upload in the My Account Portal. Attackers can make use of t…

    IBM Planning Analytics
  • Medium 5.4
    CVE-2018-1933

    IBM Planning Analytics 2.0 through 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embe…

    IBM Planning Analytics