| CVE-2026-10545 |
IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to…
|
7.5
High
|
Jul 30, 2026 |
| CVE-2026-1267 |
IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and…
|
6.5
Medium
|
Mar 17, 2026 |
| CVE-2025-14806 |
IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an attacker to trick the caching mechanism into storing…
|
5.7
Medium
|
Mar 17, 2026 |
| CVE-2025-36262 |
IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 could allow a malicious privileged user…
|
4.9
Medium
|
Sep 30, 2025 |
| CVE-2025-36132 |
IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 is vulnerable to cross-site scripting
|
5.4
Medium
|
Sep 30, 2025 |
| CVE-2025-33005 |
IBM Planning Analytics Local 2.0 and 2.1 does not invalidate session after a logout which could allow an authenticated…
|
6.3
Medium
|
Jun 1, 2025 |
| CVE-2025-33004 |
IBM Planning Analytics Local 2.0 and 2.1 could allow a privileged user to delete files from directories due to…
|
6.5
Medium
|
Jun 1, 2025 |
| CVE-2025-2896 |
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting
|
4.8
Medium
|
Jun 1, 2025 |
| CVE-2025-25044 |
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting
|
5.4
Medium
|
Jun 1, 2025 |
| CVE-2024-40693 |
IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the content of the…
|
8.0
High
|
Jan 24, 2025 |
| CVE-2024-25034 |
IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the type of file in…
|
8.0
High
|
Jan 24, 2025 |
| CVE-2024-35143 |
IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server
|
6.7
Medium
|
Aug 4, 2024 |
| CVE-2024-31907 |
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting
|
5.4
Medium
|
May 31, 2024 |
| CVE-2024-31908 |
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to stored cross-site scripting
|
6.4
Medium
|
May 31, 2024 |
| CVE-2024-31889 |
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting
|
5.4
Medium
|
May 31, 2024 |
| CVE-2023-28520 |
IBM Planning Analytics Local 2.0 is vulnerable to stored cross-site scripting
|
6.4
Medium
|
May 12, 2023 |
| CVE-2021-29853 |
IBM Planning Analytics 2.0 could expose information that could be used to to create attacks by not validating the return…
|
4.3
Medium
|
Sep 1, 2021 |
| CVE-2021-29852 |
IBM Planning Analytics 2.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Sep 1, 2021 |
| CVE-2021-29851 |
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is…
|
4.3
Medium
|
Sep 1, 2021 |
| CVE-2021-29739 |
IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is…
|
2.7
Low
|
Aug 10, 2021 |
| CVE-2020-4670 |
IBM Planning Analytics Local 2.0 connects to a Redis server
|
7.4
High
|
May 17, 2021 |
| CVE-2020-4669 |
IBM Planning Analytics Local 2.0 connects to a MongoDB server
|
7.4
High
|
May 17, 2021 |
| CVE-2020-4985 |
IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to accepting body…
|
3.7
Low
|
May 14, 2021 |
| CVE-2020-4649 |
IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by…
|
4.3
Medium
|
Nov 3, 2020 |
| CVE-2020-4503 |
IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting
|
6.1
Medium
|
Jun 2, 2020 |