Skip to content
Sign in
8.0 High

CVE-2025-36357 IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the…

Description

IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing absolute path sequences to view, read, or write arbitrary files on the system.

Affected products and versions

Product Affected versions Fixed in
IBM Planning Analytics Local 2.1 2.1.0 → 2.1.14 No fix stated

Other CVEs of IBM Planning Analytics Local

The 3 CVEs of IBM Planning Analytics Local →
CVE-2025-36437 IBM Planning Analytics Local 2.1.0 - 2.1.15 could disclose sensitive information about server architecture that could… 4.3 Medium CVE-2025-36299 IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further… 4.3 Medium
Track this CVE