Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm planning analytics local 2.0.0 vulnerabilities and exploits

(subscribe to this query)
6.4
CVSSv2
CVE-2020-4669
IBM Planning Analytics Local 2.0 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database....
Ibm Planning Analytics Cloud 2.0.0Ibm Planning Analytics Local 2.0.0
6.4
CVSSv2
CVE-2020-4670
IBM Planning Analytics Local 2.0 connects to a Redis server. The Redis server, an in-memory data structure store, running on the remote host is not protected by password authentication. A remote attacker can exploit this to gain unauthorized access to the server. IBM X-Force ID: ...
Ibm Planning Analytics Local 2.0.0Ibm Planning Analytics Cloud 2.0.0
NA
CVE-2023-28520
IBM Planning Analytics Local 2.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-F...
Ibm Planning Analytics Local 2.0.0
5
CVSSv2
CVE-2020-4985
IBM Planning Analytics Local 2.0 could allow an malicious user to obtain sensitive information due to accepting body parameters in a query. IBM X-Force ID: 192642.
Ibm Planning Analytics Local 2.0.0
4
CVSSv2
CVE-2021-29739
IBM Planning Analytics Local 2.0 could allow a remote malicious user to obtain sensitive information when a stack trace is returned in the browser. X-Force ID: 198846.
Ibm Planning Analytics Local 2.0.0
3.5
CVSSv2
CVE-2020-4645
IBM Planning Analytics Local 2.0.0 up to and including 2.0.9.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a t...
Ibm Planning Analytics Local
4.3
CVSSv2
CVE-2018-1676
IBM Planning Analytics 2.0.0 up to and including 2.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted s...
Ibm Planning Analytics Local
3.5
CVSSv2
CVE-2020-4306
IBM Planning Analytics Local 2.0.0 up to and including 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a tru...
Ibm Planning Analytics Local
5.8
CVSSv2
CVE-2020-4644
IBM Planning Analytics Local 2.0.0 up to and including 2.0.9.1 could allow a remote malicious user to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's cli...
Ibm Planning Analytics Local
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook