5.3
Medium
CVE-2020-4873 IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS…
Description
IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 190836.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Planning Analytics | 2.0 | No fix stated |
Other CVEs of Planning Analytics
The 35 CVEs of Planning Analytics →
CVE-2026-76587
IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking
8.8
High
CVE-2026-17475
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications…
7.1
High
CVE-2026-18541
IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting
6.4
Medium
CVE-2026-19620
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to…
8.8
High