Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:planning_analytics_workspace:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductPlanning Analytics Workspace (89882095-fff6-5399-a018-8dbdb936e4ad)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36357 vulnerable 2026-06-08 07:21:01.605774 IBM Planning Analytics Local Directory Traversal
HIGH (8)
IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing absolute path sequences to view, read, or write arbitrary files on the system.
Published: 2025-11-17T20:07:00.856Z
Updated: 2026-02-26T16:56:55.947Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36299 vulnerable 2026-06-08 07:21:01.546149 IBM Planning Analytics Information Disclosure
MEDIUM (4.3)
IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further attacks against the system.
Published: 2025-11-17T20:09:35.286Z
Updated: 2025-11-17T20:54:09.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35143 vulnerable 2026-06-08 06:37:35.296091 IBM Planning Analytics Local missing authentication
MEDIUM (6.7)
IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM X-Force ID: 292420.
Published: 2024-08-04T13:03:10.154Z
Updated: 2024-08-05T13:57:36.060Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22392 vulnerable 2026-06-08 05:40:53.705425 Details available
MEDIUM (6.8)
IBM Planning Analytics Local 2.0 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim could result in code execution. IBM X-Force ID: 222066.
Published: 2022-04-25T15:20:17.203Z
Updated: 2024-09-16T16:37:41.303Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22314 vulnerable 2026-06-08 05:40:08.195440 Details available
MEDIUM (4)
IBM Planning Analytics Local 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 217371.
Published: 2022-09-08T16:00:14.234Z
Updated: 2024-09-16T16:48:24.901Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22308 vulnerable 2026-06-08 05:40:08.175763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39040 vulnerable 2026-06-08 05:33:48.804683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4649 vulnerable 2026-06-08 05:26:40.601442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.