Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm planning analytics vulnerabilities and exploits
(subscribe to this query)
8
CVSSv3
CVE-2021-39040
IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. Attackers can make use of this weakness and upload malicious executable files into the system and it can be sent to victim for performing further attacks. ...
Ibm Planning Analytics Workspace 2.0
4.9
CVSSv3
CVE-2021-29739
IBM Planning Analytics Local 2.0 could allow a remote malicious user to obtain sensitive information when a stack trace is returned in the browser. X-Force ID: 198846.
Ibm Planning Analytics Local 2.0.0
3.3
CVSSv3
CVE-2022-22314
IBM Planning Analytics Local 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 217371.
Ibm Planning Analytics Workspace 2.0
7.8
CVSSv3
CVE-2022-22392
IBM Planning Analytics Local 2.0 could allow an malicious user to upload arbitrary executable files which, when executed by an unsuspecting victim could result in code execution. IBM X-Force ID: 222066.
Ibm Planning Analytics Workspace 2.0
6.1
CVSSv3
CVE-2021-39047
IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disc...
Ibm Planning Analytics 2.0
Ibm Cognos Analytics 11.1.7
Ibm Cognos Analytics
Ibm Cognos Analytics 11.2.0
Ibm Cognos Analytics 11.2.1
Netapp Oncommand Insight -
6.5
CVSSv3
CVE-2023-26024
IBM Planning Analytics on Cloud Pak for Data 4.0 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication. IBM X-Force ID: 247898.
Ibm Planning Analytics On Cloud Pak For Data 4.0
6.5
CVSSv3
CVE-2020-4764
IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an malicious user to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 188898.
Ibm Planning Analytics 2.0
7.5
CVSSv3
CVE-2023-26023
Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an malicious user to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896.
Ibm Cloud Pak For Data 4.0
7.5
CVSSv3
CVE-2023-26026
Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an malicious user to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896.
Ibm Cloud Pak For Data 4.0
7.5
CVSSv3
CVE-2023-27877
IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905.
Ibm Cloud Pak For Data 4.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middle
CVE-2024-34558
CVE-2024-32674
CVE-2024-34351
XPath injection
CVE-2023-45866
CVE-2024-25528
CVE-2024-25517
path traversal
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5