Advisories · Technology

IBM Planning Analytics.

Every CVE that names IBM Planning Analytics among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-76587 CVE record

CVSS 8.8 High

IBM Planning Analytics Buffer Overflow
- IBM Planning Analytics
- Memory corruption
Not analysed yet 20 Oct 2026
CVE-2026-17475 CVE record

CVSS 7.1 High

IBM Planning Analytics Local is affected by security vulnerabilities
- IBM Planning Analytics
- Broken access control
Not analysed yet 12 Oct 2026
CVE-2026-18541 CVE record

CVSS 6.4 Medium

IBM Planning Analytics Local is affected by security vulnerabilities
- IBM Planning Analytics
- Cross-site scripting (XSS)
Not analysed yet 12 Oct 2026
CVE-2026-19620 CVE record

CVSS 8.8 High

IBM Planning Analytics Local is affected by security vulnerabilities
- IBM Planning Analytics
- Authentication bypass
Not analysed yet 12 Oct 2026
CVE-2026-19622 CVE record

CVSS 8.8 High

IBM Planning Analytics Local is affected by security vulnerabilities
- IBM Planning Analytics
- Authentication bypass
Not analysed yet 12 Oct 2026
CVE-2026-75063 CVE record

CVSS 5.4 Medium

IBM Planning Analytics Local is affected by security vulnerabilities
- IBM Planning Analytics
- Cross-site scripting (XSS)
Not analysed yet 12 Oct 2026
CVE-2026-75061 CVE record

CVSS 7.5 High

IBM Planning Analytics Local is affected by security vulnerabilities
- IBM Planning Analytics
- Path traversal
Not analysed yet 12 Oct 2026
CVE-2026-19627 CVE record

CVSS 8.2 High

IBM Planning Analytics Local is affected by security vulnerabilities
- IBM Planning Analytics
- Path traversal
Not analysed yet 12 Oct 2026
CVE-2026-85457 CVE record

CVSS 8.1 High

IBM Planning Analytics Local is affected by security vulnerabilities
- IBM Planning Analytics
- Memory corruption
Not analysed yet 12 Oct 2026
CVE-2026-13365 CVE record

CVSS 7.1 High

IBM Planning Analytics Local is affected by security vulnerabilities
- IBM Planning Analytics
- Cross-site request forgery (CSRF)
Not analysed yet 13 Aug 2026
CVE-2023-42017 CVE record

CVSS 8.0 High

IBM Planning Analytics file upload
- IBM Planning Analytics
- Unrestricted file upload
Not analysed yet 22 Dec 2023
CVE-2022-22339 CVE record

CVSS 6.5 Medium

IBM Planning Analytics 2.0 is vulnerable to server-side request forgery (SSRF).
- IBM Planning Analytics
Not analysed yet 8 Apr 2022
CVE-2022-22308 CVE record

CVSS 7.1 High

IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack.
- IBM Planning Analytics
- IBM Planning Analytics Workspace
Not analysed yet 21 Feb 2022
CVE-2021-38873 CVE record

CVSS 6.8 Medium

IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection.
- IBM Planning Analytics
Not analysed yet 24 Nov 2021
CVE-2021-20526 CVE record

CVSS 3.7 Low

IBM Planning Analytics: IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information…
- IBM Planning Analytics
Not analysed yet 27 Oct 2021
CVE-2021-20580 CVE record

CVSS 4.3 Medium

IBM Planning Analytics: IBM Planning Analytics 2.0 could be vulnerable to cross-site request forgery (CSRF) which…
- IBM Planning Analytics
Not analysed yet 29 Jun 2021
CVE-2021-20477 CVE record

CVSS 5.4 Medium

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting.
- IBM Planning Analytics
Not analysed yet 29 Jun 2021
CVE-2020-4562 CVE record

CVSS 5.3 Medium

IBM Planning Analytics: IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information…
- IBM Planning Analytics
Not analysed yet 26 Apr 2021
CVE-2020-4882 CVE record

CVSS 6.1 Medium

IBM Planning Analytics: IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF)…
- IBM Planning Analytics
Not analysed yet 22 Mar 2021
CVE-2020-4953 CVE record

CVSS 4.3 Medium

IBM Planning Analytics: IBM Planning Analytics 2.0 could allow a remote authenticated attacker to obtain…
- IBM Planning Analytics
Not analysed yet 23 Feb 2021
CVE-2020-4881 CVE record

CVSS 5.9 Medium

IBM Planning Analytics: IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information…
- IBM Planning Analytics
Not analysed yet 19 Jan 2021
CVE-2020-4873 CVE record

CVSS 5.3 Medium

IBM Planning Analytics: IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to…
- IBM Planning Analytics
Not analysed yet 19 Jan 2021
CVE-2020-4871 CVE record

CVSS 4.0 Medium

IBM Planning Analytics: IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by…
- IBM Planning Analytics
Not analysed yet 19 Jan 2021
CVE-2020-4764 CVE record

CVSS 4.3 Medium

IBM Planning Analytics: IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow…
- IBM Planning Analytics
Not analysed yet 18 Dec 2020
CVE-2020-4653 CVE record

CVSS 6.8 Medium

IBM Planning Analytics: IBM Planning Analytics 2.0 could allow a remote attacker to conduct phishing attacks…
- IBM Planning Analytics
Not analysed yet 19 Aug 2020
CVE-2020-4648 CVE record

CVSS 6.5 Medium

IBM Planning Analytics: A vulnerability exsists in IBM Planning Analytics 2.0 whereby avatars in Planning…
- IBM Planning Analytics
Not analysed yet 19 Aug 2020
CVE-2020-4645 CVE record

CVSS 5.4 Medium

IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting.
- IBM Planning Analytics
Not analysed yet 29 Jul 2020
CVE-2020-4644 CVE record

CVSS 6.1 Medium

IBM Planning Analytics: IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to…
- IBM Planning Analytics
Not analysed yet 29 Jul 2020
CVE-2020-4527 CVE record

CVSS 5.9 Medium

IBM Planning Analytics: IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information…
- IBM Planning Analytics
Not analysed yet 20 Jul 2020
CVE-2020-4361 CVE record

CVSS 4.3 Medium

IBM Planning Analytics: IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information…
- IBM Planning Analytics
Not analysed yet 20 Jul 2020
CVE-2019-4613 CVE record

CVSS 4.3 Medium

IBM Planning Analytics: IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow…
- IBM Planning Analytics
Not analysed yet 5 Feb 2020
CVE-2019-4716 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Code injection in IBM Planning Analytics
- IBM Planning Analytics
- Code injection
Not analysed yet 18 Dec 2019
CVE-2019-4612 CVE record

CVSS 6.3 Medium

IBM Planning Analytics 2.0 is vulnerable to malicious file upload in the My Account Portal.
- IBM Planning Analytics
Not analysed yet 9 Dec 2019
CVE-2019-4611 CVE record

CVSS 5.4 Medium

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting.
- IBM Planning Analytics
Not analysed yet 9 Dec 2019
CVE-2018-1933 CVE record

CVSS 5.4 Medium

IBM Planning Analytics 2.0 through 2.0.6 is vulnerable to cross-site scripting.
- IBM Planning Analytics
Not analysed yet 1 May 2019