CVE-2024-40693

all versions

IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the content of the file uploaded

8.0HIGH

CVE-2024-25034

all versions

IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the type of file in the File Man

8.0HIGH

CVE-2023-42017

all versions

IBM Planning Analytics Local 2.0 could allow a remote attacker to upload arbitrary files, caused by the improper validation of fil

8.0HIGH

CVE-2021-39047

all versions

IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to cross-site scripting. This vulner

6.1MEDIUM

CVE-2022-22339

all versions

IBM Planning Analytics 2.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send u

7.3HIGH

CVE-2022-22308

all versions

IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file include comma

7.8HIGH

CVE-2021-38873

all versions

IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the s

7.8HIGH

CVE-2021-20526

all versions

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnl

5.3MEDIUM

CVE-2021-29853

all versions

IBM Planning Analytics 2.0 could expose information that could be used to create attacks by not validating the return values fr

4.3MEDIUM

CVE-2021-29852

all versions

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co

5.4MEDIUM

CVE-2021-29851

all versions

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the bro

4.3MEDIUM

CVE-2021-20580

all versions

IBM Planning Analytics 2.0 could be vulnerable to cross-site request forgery (CSRF) which could allow an attacker to execute malic

4.3MEDIUM

CVE-2021-20477

all versions

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co

5.4MEDIUM

CVE-2020-4562

all versions

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by allowing cross-window communication wi

5.3MEDIUM

CVE-2020-4882

all versions

IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF) attack by constucting URLs from user-contro

6.1MEDIUM

CVE-2020-4953

all versions

IBM Planning Analytics 2.0 could allow a remote authenticated attacker to obtain information about an organization's internal stru

4.3MEDIUM

CVE-2020-4881

all versions

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname ve

7.5HIGH

CVE-2020-4873

all versions

IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-

5.3MEDIUM

CVE-2020-4871

all versions

IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID:

5.5MEDIUM

CVE-2020-4764

all versions

IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unau

6.5MEDIUM

CVE-2020-4653

all versions

IBM Planning Analytics 2.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading

6.1MEDIUM

CVE-2020-4648

all versions

A vulnerability exsists in IBM Planning Analytics 2.0 whereby avatars in Planning Analytics Workspace could be modified by other u

6.5MEDIUM

CVE-2020-4527

all versions

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the Secure

5.9MEDIUM

CVE-2020-4361

all versions

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by disclosing private IP addresses in HTT

4.3MEDIUM

CVE-2019-4613

all versions

IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unau

8.8HIGH

CVE-2019-4716

>= 2.0 and <= 2.0.8

IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login

9.8CRITICAL

CVE-2019-4612

all versions

IBM Planning Analytics 2.0 is vulnerable to malicious file upload in the My Account Portal. Attackers can make use of this weaknes

8.8HIGH

CVE-2019-4611

all versions

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co

5.4MEDIUM

CVE-2019-4134

all versions

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co

6.1MEDIUM

CVE-2018-1933

>= 2.0 and <= 2.0.6

IBM Planning Analytics 2.0 through 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary

5.4MEDIUM