IBM Planning Analytics 2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:planning_analytics:2.0:*:*:*:*:*:*:*
part: a version: 2.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Planning Analytics (eec224d4-47e8-59f3-a0be-25a5d16afe8c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-40693 |
vulnerable | 2026-06-08 06:43:53.004609 |
IBM Planning Analytics file upload
HIGH (8)
IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks.
Published: 2025-01-24T15:26:27.144Z
Updated: 2025-02-12T20:01:19.903Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25034 |
vulnerable | 2026-06-08 06:31:21.760201 |
IBM Planning Analytics file upload
HIGH (8)
IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the type of file in the File Manager T1 process. Attackers can make use of this weakness and upload malicious executable files into the system that can be sent to victims for performing further attacks.
Published: 2025-01-24T15:25:05.723Z
Updated: 2025-02-12T20:01:20.029Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42017 |
vulnerable | 2026-06-08 06:11:07.694323 |
IBM Planning Analytics file upload
HIGH (8)
IBM Planning Analytics Local 2.0 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious script, which could allow the attacker to execute arbitrary code on the vulnerable system. IBM X-Force ID: 265567.
Published: 2023-12-22T16:02:54.311Z
Updated: 2024-08-02T19:16:49.662Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22339 |
vulnerable | 2026-06-08 05:40:53.578129 |
Details available
MEDIUM (6.5)
IBM Planning Analytics 2.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 219736.
Published: 2022-04-08T15:30:21.703Z
Updated: 2024-09-17T01:00:45.906Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22308 |
vulnerable | 2026-06-08 05:40:08.176461 |
Details available
HIGH (7.1)
IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file include commands and the web application could be tricked into including remote files with malicious code. IBM X-Force ID: 216891.
Published: 2022-02-21T18:10:10.356Z
Updated: 2024-09-16T18:13:10.537Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39047 |
vulnerable | 2026-06-08 05:33:48.821302 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38873 |
vulnerable | 2026-06-08 05:33:48.449776 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29853 |
vulnerable | 2026-06-08 05:31:27.111850 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29852 |
vulnerable | 2026-06-08 05:31:27.111496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29851 |
vulnerable | 2026-06-08 05:31:27.111025 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20580 |
vulnerable | 2026-06-08 05:29:09.493501 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20526 |
vulnerable | 2026-06-08 05:29:09.411903 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20477 |
vulnerable | 2026-06-08 05:29:09.296998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4953 |
vulnerable | 2026-06-08 05:26:41.232143 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4882 |
vulnerable | 2026-06-08 05:26:41.125056 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4881 |
vulnerable | 2026-06-08 05:26:41.124540 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4873 |
vulnerable | 2026-06-08 05:26:41.117851 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4871 |
vulnerable | 2026-06-08 05:26:41.117296 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4764 |
vulnerable | 2026-06-08 05:26:40.887133 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4653 |
vulnerable | 2026-06-08 05:26:40.607033 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4648 |
vulnerable | 2026-06-08 05:26:40.599673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4562 |
vulnerable | 2026-06-08 05:25:59.547865 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4527 |
vulnerable | 2026-06-08 05:25:59.481738 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4361 |
vulnerable | 2026-06-08 05:25:59.229452 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4613 |
vulnerable | 2026-06-08 05:13:57.354832 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4612 |
vulnerable | 2026-06-08 05:13:57.354465 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4611 |
vulnerable | 2026-06-08 05:13:57.353917 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4134 |
vulnerable | 2026-06-08 05:13:56.865717 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.