Advisories · Technology

IBM Planning Analytics Local.

Every CVE that names IBM Planning Analytics Local among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-10545 CVE record

CVSS 7.5 High

IBM Planning Analytics Local is affected by Open Redirect
- IBM Planning Analytics Local
- Open redirect
Not analysed yet 30 Jul 2026
CVE-2026-1267 CVE record

CVSS 6.5 Medium

IBM Planning Analytics Information Disclosure
- IBM Planning Analytics Local
- Information disclosure
Not analysed yet 17 Mar 2026
CVE-2025-14806 CVE record

CVSS 5.7 Medium

IBM Planning Analytics Information Disclosure
- IBM Planning Analytics Local
- CWE-524
Not analysed yet 17 Mar 2026
CVE-2025-36437 CVE record

CVSS 4.3 Medium

IBM Planning Analytics Local is vulnerable to disclosing sensitive information
- IBM Planning Analytics Local
- Information disclosure
Not analysed yet 9 Dec 2025
CVE-2025-36299 CVE record

CVSS 4.3 Medium

IBM Planning Analytics Information Disclosure
- IBM Planning Analytics Local
- CWE-540
Not analysed yet 17 Nov 2025
CVE-2025-36357 CVE record

CVSS 8.0 High

IBM Planning Analytics Local Directory Traversal
- IBM Planning Analytics Local
- Path traversal
Not analysed yet 17 Nov 2025
CVE-2025-36262 CVE record

CVSS 4.9 Medium

IBM Planning Analytics Local information disclosure
- IBM Planning Analytics Local
- CWE-1286
Not analysed yet 30 Sept 2025
CVE-2025-36132 CVE record

CVSS 5.4 Medium

IBM Planning Analytics Local cross-site scripting
- IBM Planning Analytics Local
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2025
CVE-2025-33005 CVE record

CVSS 6.3 Medium

IBM Planning Analytics Local session fixation
- IBM Planning Analytics Local
- Authentication bypass
Not analysed yet 1 Jun 2025
CVE-2025-33004 CVE record

CVSS 6.5 Medium

IBM Planning Analytics Local path traversal
- IBM Planning Analytics Local
- Path traversal
Not analysed yet 1 Jun 2025
CVE-2025-2896 CVE record

CVSS 4.8 Medium

IBM Planning Analytics Local cross-site scripting
- IBM Planning Analytics Local
- Cross-site scripting (XSS)
Not analysed yet 1 Jun 2025
CVE-2025-25044 CVE record

CVSS 5.4 Medium

IBM Planning Analytics Local cross-site scripting
- IBM Planning Analytics Local
- Cross-site scripting (XSS)
Not analysed yet 1 Jun 2025
CVE-2024-40693 CVE record

CVSS 8.0 High

IBM Planning Analytics file upload
- IBM Planning Analytics Local
- Unrestricted file upload
Not analysed yet 24 Jan 2025
CVE-2024-25034 CVE record

CVSS 8.0 High

IBM Planning Analytics file upload
- IBM Planning Analytics Local
- Unrestricted file upload
Not analysed yet 24 Jan 2025
CVE-2024-35143 CVE record

CVSS 6.7 Medium

IBM Planning Analytics Local missing authentication
- IBM Planning Analytics Local
- Authentication bypass
Not analysed yet 4 Aug 2024
CVE-2024-31907 CVE record

CVSS 5.4 Medium

Cross-site scripting in IBM Planning Analytics Local
- IBM Planning Analytics Local
- Cross-site scripting (XSS)
Not analysed yet 31 May 2024
CVE-2024-31908 CVE record

CVSS 6.4 Medium

IBM Planning Analytics Local cross-site scripting
- IBM Planning Analytics Local
- Cross-site scripting (XSS)
Not analysed yet 31 May 2024
CVE-2024-31889 CVE record

CVSS 5.4 Medium

IBM Planning Analytics Local cross-site scripting
- IBM Planning Analytics Local
- Cross-site scripting (XSS)
Not analysed yet 31 May 2024
CVE-2023-28520 CVE record

CVSS 6.4 Medium

IBM Planning Analytics Local cross-site scripting
- IBM Planning Analytics Local
- Cross-site scripting (XSS)
Not analysed yet 12 May 2023
CVE-2021-29853 CVE record

CVSS 4.3 Medium

IBM Planning Analytics 2.0 could expose information that could be used to to create attacks by not validating the return values from some methods or functions.
- IBM Planning Analytics Local
Not analysed yet 1 Sept 2021
CVE-2021-29852 CVE record

CVSS 5.4 Medium

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting.
- IBM Planning Analytics Local
Not analysed yet 1 Sept 2021
CVE-2021-29851 CVE record

CVSS 4.3 Medium

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser.
- IBM Planning Analytics Local
Not analysed yet 1 Sept 2021
CVE-2021-29739 CVE record

CVSS 2.7 Low

IBM Planning Analytics Local: IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive…
- IBM Planning Analytics Local
Not analysed yet 10 Aug 2021
CVE-2020-4670 CVE record

CVSS 7.4 High

IBM Planning Analytics Local 2.0 connects to a Redis server.
- IBM Planning Analytics Local
Not analysed yet 17 May 2021
CVE-2020-4669 CVE record

CVSS 7.4 High

IBM Planning Analytics Local 2.0 connects to a MongoDB server.
- IBM Planning Analytics Local
Not analysed yet 17 May 2021
CVE-2020-4985 CVE record

CVSS 3.7 Low

IBM Planning Analytics Local: IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information…
- IBM Planning Analytics Local
Not analysed yet 14 May 2021
CVE-2020-4649 CVE record

CVSS 4.3 Medium

IBM Planning Analytics Local: IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose…
- IBM Planning Analytics Local
- IBM Planning Analytics Workspace
Not analysed yet 3 Nov 2020
CVE-2020-4503 CVE record

CVSS 6.1 Medium

IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting.
- IBM Planning Analytics Local
Not analysed yet 2 Jun 2020
CVE-2020-4431 CVE record

CVSS 5.4 Medium

IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting.
- IBM Planning Analytics Local
Not analysed yet 2 Jun 2020
CVE-2020-4367 CVE record

CVSS 5.9 Medium

IBM Planning Analytics Local: IBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that…
- IBM Planning Analytics Local
Not analysed yet 2 Jun 2020
CVE-2020-4366 CVE record

CVSS 6.1 Medium

IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting.
- IBM Planning Analytics Local
Not analysed yet 2 Jun 2020
CVE-2020-4360 CVE record

CVSS 5.4 Medium

IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting.
- IBM Planning Analytics Local
Not analysed yet 2 Jun 2020
CVE-2020-4306 CVE record

CVSS 5.4 Medium

IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting.
- IBM Planning Analytics Local
Not analysed yet 29 May 2020
CVE-2019-4134 CVE record

CVSS 6.1 Medium

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting.
- IBM Planning Analytics Local
Not analysed yet 2 Jul 2019
CVE-2018-1676 CVE record

CVSS 6.1 Medium

IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting.
- IBM Planning Analytics Local
Not analysed yet 6 Jul 2018