IBM Planning Analytics vulnerabilities
35 published CVEs name IBM Planning Analytics among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 35
- Last 12 months
- 10
- Critical
- 1
- Known exploited
- 1
Critical 1High 10Medium 23Low 1Not scored 0
CVEs per yearBy the year they were published
- 20194
- 20208
- 202110
- 20222
- 20231
- 202610
Known exploitedNewest addition to KEV first
- CVE-2019-4716
IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute…
IBM · Planning Analytics
ExploitedCritical10.0
Newest CVEs
- CVE-2026-76587
IBM Planning Analytics Buffer Overflow
IBM · Planning Analytics
High8.8 - CVE-2026-17475
IBM Planning Analytics Local is affected by security vulnerabilities
IBM · Planning Analytics
High7.1 - CVE-2026-18541
IBM Planning Analytics Local is affected by security vulnerabilities
IBM · Planning Analytics
Medium6.4 - CVE-2026-19620
IBM Planning Analytics Local is affected by security vulnerabilities
IBM · Planning Analytics
High8.8 - CVE-2026-19622
IBM Planning Analytics Local is affected by security vulnerabilities
IBM · Planning Analytics
High8.8 - CVE-2026-75063
IBM Planning Analytics Local is affected by security vulnerabilities
IBM · Planning Analytics
Medium5.4 - CVE-2026-75061
IBM Planning Analytics Local is affected by security vulnerabilities
IBM · Planning Analytics
High7.5 - CVE-2026-19627
IBM Planning Analytics Local is affected by security vulnerabilities
IBM · Planning Analytics
High8.2 - CVE-2026-85457
IBM Planning Analytics Local is affected by security vulnerabilities
IBM · Planning Analytics
High8.1 - CVE-2026-13365
IBM Planning Analytics Local is affected by security vulnerabilities
IBM · Planning Analytics
High7.1
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)6
- CWE-352 Cross-site request forgery (CSRF)4
- CWE-121 Stack-based buffer overflow2
- CWE-200 Exposure of sensitive information2
- CWE-22 Path traversal2
- CWE-288 2
- CWE-434 Unrestricted file upload2
- CWE-918 Server-side request forgery (SSRF)2
- CWE-1021 1
- CWE-285 Improper authorization1