PA
Product
Planning Analytics Local
32
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 3High 5Medium 24Low 0
Watch
Add Planning Analytics Local to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-35143 | 9.1 | Aug 4 | IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server Affected: 2.0 before 2.0.97; 2.1.0 before 2.1.4 |
| CVE-2020-4670 | 9.1 | May 17 | IBM Planning Analytics Local 2.0 connects to a Redis server Affected: 2.0.0 |
| CVE-2020-4669 | 9.1 | May 17 | IBM Planning Analytics Local 2.0 connects to a MongoDB server Affected: 2.0.0 |
| CVE-2025-33005 | 8.8 | Jun 1 | IBM Planning Analytics Local 2.0 and 2.1 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system Affected: 2.0.0; 2.1.0 |
| CVE-2025-36357 | 8.0 | Nov 17 | IBM Planning Analytics Local Directory Traversal Affected: 2.1.0 through 2.1.14 |
| CVE-2026-10545 | 7.5 | Jul 30 | IBM Planning Analytics Local is affected by Open Redirect Affected: 2.1.0 through 2.1.21 |
| CVE-2020-4985 | 7.5 | May 14 | IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to accepting body parameters in a query Affected: 2.0.0 |
| CVE-2020-4367 | 7.5 | Jun 2 | IBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 2.0.0 before 2.0.9.1 |
| CVE-2026-13365 | 6.5 | Aug 13 | IBM Planning Analytics Local is affected by security vulnerabilities Affected: 2.0.0 before 2.1.23 |
| CVE-2026-1267 | 6.5 | Mar 17 | IBM Planning Analytics Information Disclosure Affected: 2.1.0 through 2.1.17 |
| CVE-2025-33004 | 6.5 | Jun 1 | IBM Planning Analytics Local 2.0 and 2.1 could allow a privileged user to delete files from directories due to improper pathname restriction Affected: 2.0.0; 2.1.0 |
| CVE-2020-4503 | 6.1 | Jun 2 | IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting Affected: 2.0.0 before 2.0.9.1 |
| CVE-2020-4366 | 6.1 | Jun 2 | IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting Affected: 2.0.0 before 2.0.9.1 |
| CVE-2018-1676 | 6.1 | Jul 6 | IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting Affected: 2.0.0 through 2.0.4 |
| CVE-2025-14806 | 5.7 | Mar 17 | IBM Planning Analytics Information Disclosure Affected: 2.1.0 through 2.1.17 |
| CVE-2025-36132 | 5.4 | Sep 30 | IBM Planning Analytics Local cross-site scripting Affected: 2.0.0 through 2.0.106; 2.1.0 through 2.1.13 |
| CVE-2025-2896 | 5.4 | Jun 1 | IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting Affected: 2.0.0; 2.1.0 |
| CVE-2025-25044 | 5.4 | Jun 1 | IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting Affected: 2.0.0; 2.1.0 |
| CVE-2024-31908 | 5.4 | May 31 | IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to stored cross-site scripting Affected: 2.0.0; 2.1.0 |
| CVE-2024-31907 | 5.4 | May 31 | IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting Affected: 2.0.0; 2.1.0 |
| CVE-2024-31889 | 5.4 | May 31 | IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting Affected: 2.0.0; 2.1.0 |
| CVE-2023-28520 | 5.4 | May 12 | IBM Planning Analytics Local 2.0 is vulnerable to stored cross-site scripting Affected: 2.0.0 |
| CVE-2020-4645 | 5.4 | Jul 29 | IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting Affected: 2.0.0 through 2.0.9.1 |
| CVE-2020-4644 | 5.4 | Jul 29 | IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the victim Affected: 2.0.0 through 2.0.9.1 |
| CVE-2020-4431 | 5.4 | Jun 2 | IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting Affected: 2.0.0 before 2.0.9.1 |
| CVE-2020-4360 | 5.4 | Jun 2 | IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting Affected: 2.0.0 before 2.0.9.1 |
| CVE-2020-4306 | 5.4 | May 29 | IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting Affected: 2.0.0 through 2.0.9 |
| CVE-2025-36262 | 4.9 | Sep 30 | IBM Planning Analytics Local information disclosure Affected: 2.0.0 through 2.0.106; 2.1.0 through 2.1.13 |
| CVE-2021-29739 | 4.9 | Aug 10 | IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser Affected: 2.0.0 |
| CVE-2025-36437 | 4.3 | Dec 9 | IBM Planning Analytics Local is vulnerable to disclosing sensitive information Affected: 2.1.0 through 2.1.15 |
| CVE-2025-36299 | 4.3 | Nov 17 | IBM Planning Analytics Information Disclosure Affected: 2.1.0 through 2.1.14 |
| CVE-2020-4649 | 4.3 | Nov 3 | IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions Affected: through 2.0.9.2 |
Showing 32