| CVE-2026-10545 |
IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to…
|
7.5
Élevée
|
30 juil. 2026 |
| CVE-2026-1267 |
IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and…
|
6.5
Moyenne
|
17 mars 2026 |
| CVE-2025-14806 |
IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an attacker to trick the caching mechanism into storing…
|
5.7
Moyenne
|
17 mars 2026 |
| CVE-2025-36262 |
IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 could allow a malicious privileged user…
|
4.9
Moyenne
|
30 sept. 2025 |
| CVE-2025-36132 |
IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
30 sept. 2025 |
| CVE-2025-33005 |
IBM Planning Analytics Local 2.0 and 2.1 does not invalidate session after a logout which could allow an authenticated…
|
6.3
Moyenne
|
1 juin 2025 |
| CVE-2025-33004 |
IBM Planning Analytics Local 2.0 and 2.1 could allow a privileged user to delete files from directories due to…
|
6.5
Moyenne
|
1 juin 2025 |
| CVE-2025-2896 |
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting
|
4.8
Moyenne
|
1 juin 2025 |
| CVE-2025-25044 |
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
1 juin 2025 |
| CVE-2024-40693 |
IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the content of the…
|
8.0
Élevée
|
24 janv. 2025 |
| CVE-2024-25034 |
IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the type of file in…
|
8.0
Élevée
|
24 janv. 2025 |
| CVE-2024-35143 |
IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server
|
6.7
Moyenne
|
4 août 2024 |
| CVE-2024-31907 |
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
31 mai 2024 |
| CVE-2024-31908 |
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to stored cross-site scripting
|
6.4
Moyenne
|
31 mai 2024 |
| CVE-2024-31889 |
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
31 mai 2024 |
| CVE-2023-28520 |
IBM Planning Analytics Local 2.0 is vulnerable to stored cross-site scripting
|
6.4
Moyenne
|
12 mai 2023 |
| CVE-2021-29853 |
IBM Planning Analytics 2.0 could expose information that could be used to to create attacks by not validating the return…
|
4.3
Moyenne
|
1 sept. 2021 |
| CVE-2021-29852 |
IBM Planning Analytics 2.0 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
1 sept. 2021 |
| CVE-2021-29851 |
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is…
|
4.3
Moyenne
|
1 sept. 2021 |
| CVE-2021-29739 |
IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is…
|
2.7
Faible
|
10 août 2021 |
| CVE-2020-4670 |
IBM Planning Analytics Local 2.0 connects to a Redis server
|
7.4
Élevée
|
17 mai 2021 |
| CVE-2020-4669 |
IBM Planning Analytics Local 2.0 connects to a MongoDB server
|
7.4
Élevée
|
17 mai 2021 |
| CVE-2020-4985 |
IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to accepting body…
|
3.7
Faible
|
14 mai 2021 |
| CVE-2020-4649 |
IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by…
|
4.3
Moyenne
|
3 nov. 2020 |
| CVE-2020-4503 |
IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting
|
6.1
Moyenne
|
2 juin 2020 |