Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:planning_analytics:2.1:*:*:*:*:*:*:*

part: a version: 2.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductPlanning Analytics (eec224d4-47e8-59f3-a0be-25a5d16afe8c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-40693 vulnerable 2026-06-08 06:43:53.005755 IBM Planning Analytics file upload
HIGH (8)
IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks.
Published: 2025-01-24T15:26:27.144Z
Updated: 2025-02-12T20:01:19.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25034 vulnerable 2026-06-08 06:31:21.761109 IBM Planning Analytics file upload
HIGH (8)
IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the type of file in the File Manager T1 process. Attackers can make use of this weakness and upload malicious executable files into the system that can be sent to victims for performing further attacks.
Published: 2025-01-24T15:25:05.723Z
Updated: 2025-02-12T20:01:20.029Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.