Vulnerabilidades do Ibm Planning Analytics Local
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Ibm Planning Analytics Local: 7 registro(s), com versões afetadas e correções.cpe:2.3:a:ibm:planning_analytics_local
CVE-2026-13365
Média · 6.5
CWE-352 13/08/2026
IBM Planning Analytics Local is affected by security vulnerabilities
IBM Planning Analytics 2.0, and 2.1 Local is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVE-2026-10545
Alta · 7.5
CWE-601 30/07/2026
IBM Planning Analytics Local is affected by Open Redirect
IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user sessions.
CVE-2026-1267
Média · 6.5
CWE-200 17/03/2026
IBM Planning Analytics Information Disclosure
IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and administrative functionalities due to lack of proper access controls.
CVE-2025-14806
Média · 5.7
CWE-524 17/03/2026
IBM Planning Analytics Information Disclosure
IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an attacker to trick the caching mechanism into storing and serving sensitive, user-specific responses as publicly cacheable resources.
CVE-2025-36437
Média · 4.3
CWE-209 09/12/2025
IBM Planning Analytics Local is vulnerable to disclosing sensitive information
IBM Planning Analytics Local 2.1.0 - 2.1.15 could disclose sensitive information about server architecture that could aid in further attacks against the system.
CVE-2025-36357
Alta · 8.0
CWE-36 17/11/2025
IBM Planning Analytics Local Directory Traversal
IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing absolute path sequences to view, read, or write arbitrary files on the system.
CVE-2025-36299
Média · 4.3
CWE-540 17/11/2025
IBM Planning Analytics Information Disclosure
IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further attacks against the system.