Ibm Planning Analytics Local vulnerabilities
36 known vulnerabilities affecting ibm/planning_analytics_local.
Total CVEs
36
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH6MEDIUM27
Vulnerabilities
Page 2 of 2
CVE-2023-28520P4MEDIUMCVSS 5.4v2.0.0v2.02023-05-12
CVE-2023-28520 [MEDIUM] CWE-79 CVE-2023-28520: IBM Planning Analytics Local 2.0 is vulnerable to stored cross-site scripting. This vulnerability al
IBM Planning Analytics Local 2.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 250454.
nvd
CVE-2024-31908P4MEDIUMCVSS 5.4v2.0.0v2.1.0+1 more2024-05-31
CVE-2024-31908 [MEDIUM] CWE-79 CVE-2024-31908: IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to stored cross-site scripting. This vulnerab
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 289890.
nvd
CVE-2024-31889P4MEDIUMCVSS 5.4v2.0.0v2.1.0+1 more2024-05-31
CVE-2024-31889 [MEDIUM] CWE-79 CVE-2024-31889: IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability a
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 288136.
nvd
CVE-2024-31907P4MEDIUMCVSS 5.4v2.0.0v2.1.0+1 more2024-05-31
CVE-2024-31907 [MEDIUM] CWE-79 CVE-2024-31907: IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability a
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 289889.
nvd
CVE-2025-25044P4MEDIUMCVSS 5.4v2.0.0v2.1.0+2 more2025-06-01
CVE-2025-25044 [MEDIUM] CWE-79 CVE-2025-25044: IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability a
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
nvd
CVE-2025-2896P4MEDIUMCVSS 5.4v2.0.0v2.1.0+2 more2025-06-01
CVE-2025-2896 [MEDIUM] CWE-79 CVE-2025-2896: IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability a
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
nvd
CVE-2020-4360P4MEDIUMCVSS 5.4≥ 2.0.0, < 2.0.9.1v2.02020-06-02
CVE-2020-4360 [MEDIUM] CWE-79 CVE-2020-4360: IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows us
IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178765.
nvd
CVE-2020-4645P4MEDIUMCVSS 5.4≥ 2.0.0, ≤ 2.0.9.12020-07-29
CVE-2020-4645 [MEDIUM] CWE-79 CVE-2020-4645: IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting. This vulne
IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 185717.
nvd
CVE-2020-4431P4MEDIUMCVSS 5.4≥ 2.0.0, < 2.0.9.1v2.02020-06-02
CVE-2020-4431 [MEDIUM] CWE-79 CVE-2020-4431: IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows us
IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 180761.
nvd
CVE-2020-4306P4MEDIUMCVSS 5.4≥ 2.0.0, ≤ 2.0.9v2.0.0+1 more2020-05-29
CVE-2020-4306 [MEDIUM] CWE-79 CVE-2020-4306: IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnera
IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176735.
nvd
CVE-2021-29739P4MEDIUMCVSS 4.9v2.0.0v2.02021-08-10
CVE-2021-29739 [MEDIUM] CWE-252 CVE-2021-29739: IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when
IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. X-Force ID: 198846.
nvd
CVE-2025-36299P4MEDIUMCVSS 4.3≥ 2.1.0, < 2.1.152025-11-17
CVE-2025-36299 [MEDIUM] CWE-540 CVE-2025-36299: IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could
IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further attacks against the system.
nvd
CVE-2021-29851P4MEDIUMCVSS 4.3v2.02021-09-01
CVE-2021-29851 [MEDIUM] CVE-2021-29851: IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stac
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527.
nvd
CVE-2025-36437P4MEDIUMCVSS 4.3≥ 2.1.0, < 2.1.162025-12-09
CVE-2025-36437 [MEDIUM] CWE-209 CVE-2025-36437: IBM Planning Analytics Local 2.1.0 - 2.1.15 could disclose sensitive information about server archit
IBM Planning Analytics Local 2.1.0 - 2.1.15 could disclose sensitive information about server architecture that could aid in further attacks against the system.
nvd
CVE-2020-4649P4MEDIUMCVSS 4.3≤ 2.0.9.2v2.0.9.22020-11-03
CVE-2020-4649 [MEDIUM] CWE-200 CVE-2020-4649: IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to no
IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022.
nvd
CVE-2021-29853P4MEDIUMCVSS 4.3v2.02021-09-01
CVE-2021-29853 [MEDIUM] CWE-252 CVE-2021-29853: IBM Planning Analytics 2.0 could expose information that could be used to to create attacks by not v
IBM Planning Analytics 2.0 could expose information that could be used to to create attacks by not validating the return values from some methods or functions. IBM X-Force ID: 205529.
nvd
← Previous2 / 2