| CVE-2026-76587 |
IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking
|
8.8
Élevée
|
20 oct. 2026 |
| CVE-2026-17475 |
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications…
|
7.1
Élevée
|
12 oct. 2026 |
| CVE-2026-18541 |
IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting
|
6.4
Moyenne
|
12 oct. 2026 |
| CVE-2026-19620 |
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to…
|
8.8
Élevée
|
12 oct. 2026 |
| CVE-2026-19622 |
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due…
|
8.8
Élevée
|
12 oct. 2026 |
| CVE-2026-75063 |
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to…
|
5.4
Moyenne
|
12 oct. 2026 |
| CVE-2026-75061 |
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system
|
7.5
Élevée
|
12 oct. 2026 |
| CVE-2026-19627 |
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain…
|
8.2
Élevée
|
12 oct. 2026 |
| CVE-2026-85457 |
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a…
|
8.1
Élevée
|
12 oct. 2026 |
| CVE-2026-13365 |
IBM Planning Analytics 2.0, and 2.1 Local is vulnerable to cross-site request forgery which could allow an attacker to…
|
7.1
Élevée
|
13 août 2026 |
| CVE-2023-42017 |
IBM Planning Analytics Local 2.0 could allow a remote attacker to upload arbitrary files, caused by the improper…
|
8.0
Élevée
|
22 déc. 2023 |
| CVE-2022-22339 |
IBM Planning Analytics 2.0 is vulnerable to server-side request forgery (SSRF)
|
6.5
Moyenne
|
8 avr. 2022 |
| CVE-2022-22308 |
IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack
|
7.1
Élevée
|
21 févr. 2022 |
| CVE-2021-38873 |
IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection
|
6.8
Moyenne
|
24 nov. 2021 |
| CVE-2021-20526 |
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set…
|
3.7
Faible
|
27 oct. 2021 |
| CVE-2021-20580 |
IBM Planning Analytics 2.0 could be vulnerable to cross-site request forgery (CSRF) which could allow an attacker to…
|
4.3
Moyenne
|
29 juin 2021 |
| CVE-2021-20477 |
IBM Planning Analytics 2.0 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
29 juin 2021 |
| CVE-2020-4562 |
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by allowing cross-window…
|
5.3
Moyenne
|
26 avr. 2021 |
| CVE-2020-4882 |
IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF) attack by constucting URLs from…
|
6.1
Moyenne
|
22 mars 2021 |
| CVE-2020-4953 |
IBM Planning Analytics 2.0 could allow a remote authenticated attacker to obtain information about an organization's…
|
4.3
Moyenne
|
23 févr. 2021 |
| CVE-2020-4881 |
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server…
|
5.9
Moyenne
|
19 janv. 2021 |
| CVE-2020-4873 |
IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS…
|
5.3
Moyenne
|
19 janv. 2021 |
| CVE-2020-4871 |
IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system
|
4.0
Moyenne
|
19 janv. 2021 |
| CVE-2020-4764 |
IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute…
|
4.3
Moyenne
|
18 déc. 2020 |
| CVE-2020-4653 |
IBM Planning Analytics 2.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
|
6.8
Moyenne
|
19 août 2020 |