4.9
Medium
CVE-2025-36262 IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 could allow a malicious privileged user…
Description
IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 could allow a malicious privileged user to bypass the UI to gain unauthorized access to sensitive information due to the improper validation of input.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Planning Analytics Local 2.1 | 2.1.0 → 2.1.13 | No fix stated |
| Planning Analytics Local 2.0 | 2.0.0 → 2.0.106 | No fix stated |
Other CVEs of Planning Analytics Local
The 32 CVEs of Planning Analytics Local →
CVE-2026-10545
IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to…
7.5
High
CVE-2026-1267
IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and…
6.5
Medium
CVE-2025-14806
IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an attacker to trick the caching mechanism into storing…
5.7
Medium
CVE-2025-36132
IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 is vulnerable to cross-site scripting
5.4
Medium