Ibm Planning Analytics Local vulnerabilities

36 known vulnerabilities affecting ibm/planning_analytics_local.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL3HIGH6MEDIUM27

Vulnerabilities

Page 2 of 2

CVE-2021-29851MEDIUMCVSS 4.3v2.02021-09-01

CVE-2021-29851 [MEDIUM] CVE-2021-29851: IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stac IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527.

cvelistv5nvd

CVE-2021-29739MEDIUMCVSS 4.9v2.0.0v2.02021-08-10

CVE-2021-29739 [MEDIUM] CWE-252 CVE-2021-29739: IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. X-Force ID: 198846.

cvelistv5nvd

CVE-2020-4670CRITICALCVSS 9.1v2.0.0v2.02021-05-17

CVE-2020-4670 [CRITICAL] CWE-306 CVE-2020-4670: IBM Planning Analytics Local 2.0 connects to a Redis server. The Redis server, an in-memory data str IBM Planning Analytics Local 2.0 connects to a Redis server. The Redis server, an in-memory data structure store, running on the remote host is not protected by password authentication. A remote attacker can exploit this to gain unauthorized access to the server. IBM X-Force ID: 186401.

cvelistv5nvd

CVE-2020-4669CRITICALCVSS 9.1v2.0.0v2.02021-05-17

CVE-2020-4669 [CRITICAL] CWE-862 CVE-2020-4669: IBM Planning Analytics Local 2.0 connects to a MongoDB server. MongoDB, a document-oriented database IBM Planning Analytics Local 2.0 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM X-Force ID: 184600.

cvelistv5nvd

CVE-2020-4985HIGHCVSS 7.5v2.0.0v2.02021-05-14

CVE-2020-4985 [HIGH] CVE-2020-4985: IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to acce IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to accepting body parameters in a query. IBM X-Force ID: 192642.

cvelistv5nvd

CVE-2020-4649MEDIUMCVSS 4.3≤ 2.0.9.2v2.0.9.22020-11-03

CVE-2020-4649 [MEDIUM] CWE-200 CVE-2020-4649: IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to no IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022.

cvelistv5nvd

CVE-2020-4645MEDIUMCVSS 5.4≥ 2.0.0, ≤ 2.0.9.12020-07-29

CVE-2020-4645 [MEDIUM] CWE-79 CVE-2020-4645: IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting. This vulne IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 185717.

nvd

CVE-2020-4644MEDIUMCVSS 5.4≥ 2.0.0, ≤ 2.0.9.12020-07-29

CVE-2020-4644 [MEDIUM] CWE-1021 CVE-2020-4644: IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the click IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 185716.

nvd

CVE-2020-4367HIGHCVSS 7.5≥ 2.0.0, < 2.0.9.1v2.02020-06-02

CVE-2020-4367 [HIGH] CWE-327 CVE-2020-4367: IBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could allow IBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 179001.

cvelistv5nvd

CVE-2020-4431MEDIUMCVSS 5.4≥ 2.0.0, < 2.0.9.1v2.02020-06-02

CVE-2020-4431 [MEDIUM] CWE-79 CVE-2020-4431: IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows us IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 180761.

cvelistv5nvd

CVE-2020-4366MEDIUMCVSS 6.1≥ 2.0.0, < 2.0.9.1v2.02020-06-02

CVE-2020-4366 [MEDIUM] CWE-79 CVE-2020-4366: IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows us IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178965.

cvelistv5nvd

CVE-2020-4503MEDIUMCVSS 6.1≥ 2.0.0, < 2.0.9.1v2.02020-06-02

CVE-2020-4503 [MEDIUM] CWE-79 CVE-2020-4503: IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows us IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182283.

cvelistv5nvd

CVE-2020-4360MEDIUMCVSS 5.4≥ 2.0.0, < 2.0.9.1v2.02020-06-02

CVE-2020-4360 [MEDIUM] CWE-79 CVE-2020-4360: IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows us IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178765.

cvelistv5nvd

CVE-2020-4306MEDIUMCVSS 5.4≥ 2.0.0, ≤ 2.0.9v2.0.0+1 more2020-05-29

CVE-2020-4306 [MEDIUM] CWE-79 CVE-2020-4306: IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnera IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176735.

cvelistv5nvd

CVE-2019-4134MEDIUMCVSS 6.1v2.02019-07-02

CVE-2019-4134 [MEDIUM] CWE-79 CVE-2019-4134: IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158281.

cvelistv5nvd

CVE-2018-1676MEDIUMCVSS 6.1≥ 2.0.0, ≤ 2.0.4v2.0.1+4 more2018-07-06

CVE-2018-1676 [MEDIUM] CWE-79 CVE-2018-1676: IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting. This vulnerability IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145118.

cvelistv5nvd

← Previous2 / 2