CVE-2025-2896
published 2025-06-01CVE-2025-2896: IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript…
medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | planning_analytics_local | — | — |
| ibm | planning_analytics_local | — | — |
| ibm | planning_analytics_local | — | — |
| ibm | planning_analytics_local | — | — |