Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:planning_analytics_local:2.1.0:*:*:*:*:*:*:*

part: a version: 2.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductPlanning Analytics Local (85edda6f-f34f-5ef6-a21b-ecd4b676186b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1267 vulnerable 2026-06-08 07:49:08.087424 IBM Planning Analytics Information Disclosure
MEDIUM (6.5)
IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and administrative functionalities due to lack of proper access controls.
Published: 2026-03-17T21:50:24.914Z
Updated: 2026-03-18T14:57:13.447Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36357 vulnerable 2026-06-08 07:21:01.605463 IBM Planning Analytics Local Directory Traversal
HIGH (8)
IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing absolute path sequences to view, read, or write arbitrary files on the system.
Published: 2025-11-17T20:07:00.856Z
Updated: 2026-02-26T16:56:55.947Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36299 vulnerable 2026-06-08 07:21:01.543409 IBM Planning Analytics Information Disclosure
MEDIUM (4.3)
IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further attacks against the system.
Published: 2025-11-17T20:09:35.286Z
Updated: 2025-11-17T20:54:09.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36262 vulnerable 2026-06-08 07:21:01.538497 IBM Planning Analytics Local information disclosure
MEDIUM (4.9)
IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 could allow a malicious privileged user to bypass the UI to gain unauthorized access to sensitive information due to the improper validation of input.
Published: 2025-09-30T19:42:37.033Z
Updated: 2025-09-30T20:41:05.565Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36132 vulnerable 2026-06-08 07:21:01.132602 IBM Planning Analytics Local cross-site scripting
MEDIUM (5.4)
IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-09-30T19:41:19.912Z
Updated: 2025-09-30T20:40:56.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33005 vulnerable 2026-06-08 07:19:01.299858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33004 vulnerable 2026-06-08 07:19:01.299203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2896 vulnerable 2026-06-08 07:16:58.631612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25044 vulnerable 2026-06-08 07:12:50.540347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14806 vulnerable 2026-06-08 07:06:35.155096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40693 vulnerable 2026-06-08 06:43:53.003242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35143 vulnerable 2026-06-08 06:37:35.295300 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31908 vulnerable 2026-06-08 06:35:32.388433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31907 vulnerable 2026-06-08 06:35:32.388005 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31889 vulnerable 2026-06-08 06:35:32.267488 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25034 vulnerable 2026-06-08 06:31:21.758700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.