IBM Planning Analytics Local 2.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:planning_analytics_local:2.0.0:*:*:*:*:*:*:*
part: a version: 2.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Planning Analytics Local (85edda6f-f34f-5ef6-a21b-ecd4b676186b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36437 |
vulnerable | 2026-06-08 07:21:01.730250 |
IBM Planning Analytics Local is vulnerable to disclosing sensitive information
MEDIUM (4.3)
IBM Planning Analytics Local 2.1.0 - 2.1.15 could disclose sensitive information about server architecture that could aid in further attacks against the system.
Published: 2025-12-09T22:04:14.831Z
Updated: 2025-12-10T16:50:35.621Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36262 |
vulnerable | 2026-06-08 07:21:01.538332 |
IBM Planning Analytics Local information disclosure
MEDIUM (4.9)
IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13
could allow a malicious privileged user to bypass the UI to gain unauthorized access to sensitive information due to the improper validation of input.
Published: 2025-09-30T19:42:37.033Z
Updated: 2025-09-30T20:41:05.565Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36132 |
vulnerable | 2026-06-08 07:21:01.130022 |
IBM Planning Analytics Local cross-site scripting
MEDIUM (5.4)
IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-09-30T19:41:19.912Z
Updated: 2025-09-30T20:40:56.983Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33005 |
vulnerable | 2026-06-08 07:19:01.299810 |
IBM Planning Analytics Local session fixation
MEDIUM (6.3)
IBM Planning Analytics Local 2.0 and 2.1 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.
Published: 2025-06-01T11:39:06.583Z
Updated: 2025-08-26T14:53:31.308Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33004 |
vulnerable | 2026-06-08 07:19:01.298444 |
IBM Planning Analytics Local path traversal
MEDIUM (6.5)
IBM Planning Analytics Local 2.0 and 2.1 could allow a privileged user to delete files from directories due to improper pathname restriction.
Published: 2025-06-01T11:37:51.426Z
Updated: 2025-08-26T14:53:57.680Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2896 |
vulnerable | 2026-06-08 07:16:58.630354 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25044 |
vulnerable | 2026-06-08 07:12:50.539399 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-40693 |
vulnerable | 2026-06-08 06:43:53.002500 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35143 |
vulnerable | 2026-06-08 06:37:35.294116 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31908 |
vulnerable | 2026-06-08 06:35:32.388399 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31907 |
vulnerable | 2026-06-08 06:35:32.387964 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31889 |
vulnerable | 2026-06-08 06:35:32.266507 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25034 |
vulnerable | 2026-06-08 06:31:21.756628 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28520 |
vulnerable | 2026-06-08 06:01:11.034681 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29739 |
vulnerable | 2026-06-08 05:31:26.904671 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4985 |
vulnerable | 2026-06-08 05:26:41.329334 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4670 |
vulnerable | 2026-06-08 05:26:40.634497 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4669 |
vulnerable | 2026-06-08 05:26:40.633992 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.