Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:planning_analytics:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductPlanning Analytics (eec224d4-47e8-59f3-a0be-25a5d16afe8c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-42017 vulnerable 2026-06-08 06:11:07.693162 IBM Planning Analytics file upload
HIGH (8)
IBM Planning Analytics Local 2.0 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious script, which could allow the attacker to execute arbitrary code on the vulnerable system. IBM X-Force ID: 265567.
Published: 2023-12-22T16:02:54.311Z
Updated: 2024-08-02T19:16:49.662Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22339 vulnerable 2026-06-08 05:40:53.577184 Details available
MEDIUM (6.5)
IBM Planning Analytics 2.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 219736.
Published: 2022-04-08T15:30:21.703Z
Updated: 2024-09-17T01:00:45.906Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22308 vulnerable 2026-06-08 05:40:08.175138 Details available
HIGH (7.1)
IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file include commands and the web application could be tricked into including remote files with malicious code. IBM X-Force ID: 216891.
Published: 2022-02-21T18:10:10.356Z
Updated: 2024-09-16T18:13:10.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38873 vulnerable 2026-06-08 05:33:48.449063 Details available
MEDIUM (6.8)
IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 208396.
Published: 2021-11-24T16:15:12.881Z
Updated: 2024-09-17T02:06:20.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20580 vulnerable 2026-06-08 05:29:09.493345 Details available
MEDIUM (4.3)
IBM Planning Analytics 2.0 could be vulnerable to cross-site request forgery (CSRF) which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 198241.
Published: 2021-06-29T15:50:22.337Z
Updated: 2024-09-17T03:58:55.397Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20526 vulnerable 2026-06-08 05:29:09.411868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20477 vulnerable 2026-06-08 05:29:09.295941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4953 vulnerable 2026-06-08 05:26:41.232025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4882 vulnerable 2026-06-08 05:26:41.124936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4881 vulnerable 2026-06-08 05:26:41.124426 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4873 vulnerable 2026-06-08 05:26:41.117732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4871 vulnerable 2026-06-08 05:26:41.117259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4764 vulnerable 2026-06-08 05:26:40.887096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4653 vulnerable 2026-06-08 05:26:40.607000 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4648 vulnerable 2026-06-08 05:26:40.598585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4645 vulnerable 2026-06-08 05:26:40.593709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4644 vulnerable 2026-06-08 05:26:40.592351 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4562 vulnerable 2026-06-08 05:25:59.547832 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4527 vulnerable 2026-06-08 05:25:59.481707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4361 vulnerable 2026-06-08 05:25:59.228504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4716 vulnerable 2026-06-08 05:13:57.425446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4613 vulnerable 2026-06-08 05:13:57.354795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4612 vulnerable 2026-06-08 05:13:57.354428 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4611 vulnerable 2026-06-08 05:13:57.353864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1933 vulnerable 2026-06-08 05:11:26.401383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.