| CVE-2026-76587 |
IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking
|
8.8
High
|
Oct 20, 2026 |
| CVE-2026-17475 |
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications…
|
7.1
High
|
Oct 12, 2026 |
| CVE-2026-18541 |
IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Oct 12, 2026 |
| CVE-2026-19620 |
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to…
|
8.8
High
|
Oct 12, 2026 |
| CVE-2026-19622 |
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due…
|
8.8
High
|
Oct 12, 2026 |
| CVE-2026-75063 |
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to…
|
5.4
Medium
|
Oct 12, 2026 |
| CVE-2026-75061 |
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system
|
7.5
High
|
Oct 12, 2026 |
| CVE-2026-19627 |
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain…
|
8.2
High
|
Oct 12, 2026 |
| CVE-2026-85457 |
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a…
|
8.1
High
|
Oct 12, 2026 |
| CVE-2026-13365 |
IBM Planning Analytics 2.0, and 2.1 Local is vulnerable to cross-site request forgery which could allow an attacker to…
|
7.1
High
|
Aug 13, 2026 |
| CVE-2023-42017 |
IBM Planning Analytics Local 2.0 could allow a remote attacker to upload arbitrary files, caused by the improper…
|
8.0
High
|
Dec 22, 2023 |
| CVE-2022-22339 |
IBM Planning Analytics 2.0 is vulnerable to server-side request forgery (SSRF)
|
6.5
Medium
|
Apr 8, 2022 |
| CVE-2022-22308 |
IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack
|
7.1
High
|
Feb 21, 2022 |
| CVE-2021-38873 |
IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection
|
6.8
Medium
|
Nov 24, 2021 |
| CVE-2021-20526 |
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set…
|
3.7
Low
|
Oct 27, 2021 |
| CVE-2021-20580 |
IBM Planning Analytics 2.0 could be vulnerable to cross-site request forgery (CSRF) which could allow an attacker to…
|
4.3
Medium
|
Jun 29, 2021 |
| CVE-2021-20477 |
IBM Planning Analytics 2.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Jun 29, 2021 |
| CVE-2020-4562 |
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by allowing cross-window…
|
5.3
Medium
|
Apr 26, 2021 |
| CVE-2020-4882 |
IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF) attack by constucting URLs from…
|
6.1
Medium
|
Mar 22, 2021 |
| CVE-2020-4953 |
IBM Planning Analytics 2.0 could allow a remote authenticated attacker to obtain information about an organization's…
|
4.3
Medium
|
Feb 23, 2021 |
| CVE-2020-4881 |
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server…
|
5.9
Medium
|
Jan 19, 2021 |
| CVE-2020-4873 |
IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS…
|
5.3
Medium
|
Jan 19, 2021 |
| CVE-2020-4871 |
IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system
|
4.0
Medium
|
Jan 19, 2021 |
| CVE-2020-4764 |
IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute…
|
4.3
Medium
|
Dec 18, 2020 |
| CVE-2020-4653 |
IBM Planning Analytics 2.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
|
6.8
Medium
|
Aug 19, 2020 |