Planning Analytics

23 results · Clear filters · Feed

• Medium 6.4
  CVE-2026-18541

  IBM Planning Analytics Local is affected by security vulnerabilities

  IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disc…

  IBM Planning Analytics
  Oct 12, 2026
• Medium 5.4
  CVE-2026-75063

  IBM Planning Analytics Local is affected by security vulnerabilities

  IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding.

  IBM Planning Analytics
  Oct 12, 2026
• Medium 6.5
  CVE-2022-22339

  IBM Planning Analytics 2.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacke…

  IBM Planning Analytics
  Apr 8, 2022
• Medium 6.8
  CVE-2021-38873

  IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary comman…

  IBM Planning Analytics
  Nov 24, 2021
• Medium 4.3
  CVE-2021-20580

  IBM Planning Analytics 2.0 could be vulnerable to cross-site request forgery (CSRF) which could allow an attacker to ex…

  IBM Planning Analytics
  Jun 29, 2021
• Medium 5.4
  CVE-2021-20477

  IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

  IBM Planning Analytics
  Jun 29, 2021
• Medium 5.3
  CVE-2020-4562

  IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by allowing cross-window commu…

  IBM Planning Analytics
  Apr 26, 2021
• Medium 6.1
  CVE-2020-4882

  IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF) attack by constucting URLs from …

  IBM Planning Analytics
  Mar 22, 2021
• Medium 4.3
  CVE-2020-4953

  IBM Planning Analytics 2.0 could allow a remote authenticated attacker to obtain information about an organization's in…

  IBM Planning Analytics
  Feb 23, 2021
• Medium 5.9
  CVE-2020-4881

  IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server …

  IBM Planning Analytics
  Jan 19, 2021
• Medium 5.3
  CVE-2020-4873

  IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS pol…

  IBM Planning Analytics
  Jan 19, 2021
• Medium 4.0
  CVE-2020-4871

  IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X…

  IBM Planning Analytics
  Jan 19, 2021
• Medium 4.3
  CVE-2020-4764

  IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicio…

  IBM Planning Analytics
  Dec 18, 2020
• Medium 6.8
  CVE-2020-4653

  IBM Planning Analytics 2.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By…

  IBM Planning Analytics
  Aug 19, 2020
• Medium 6.5
  CVE-2020-4648

  A vulnerability exsists in IBM Planning Analytics 2.0 whereby avatars in Planning Analytics Workspace could be modified…

  IBM Planning Analytics
  Aug 19, 2020
• Medium 5.4
  CVE-2020-4645

  IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting. This vulnerability allows use…

  IBM Planning Analytics
  Jul 29, 2020
• Medium 6.1
  CVE-2020-4644

  IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the v…

  IBM Planning Analytics
  Jul 29, 2020
• Medium 5.9
  CVE-2020-4527

  IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set …

  IBM Planning Analytics
  Jul 20, 2020
• Medium 4.3
  CVE-2020-4361

  IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by disclosing private IP addre…

  IBM Planning Analytics
  Jul 20, 2020
• Medium 4.3
  CVE-2019-4613

  IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicio…

  IBM Planning Analytics
  Feb 5, 2020
• Medium 5.4
  CVE-2019-4611

  IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

  IBM Planning Analytics
  Dec 9, 2019
• Medium 6.3
  CVE-2019-4612

  IBM Planning Analytics 2.0 is vulnerable to malicious file upload in the My Account Portal. Attackers can make use of t…

  IBM Planning Analytics
  Dec 9, 2019
• Medium 5.4
  CVE-2018-1933

  IBM Planning Analytics 2.0 through 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embe…

  IBM Planning Analytics
  May 1, 2019