Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority LOW 38

IBM Planning Analytics Local 2.0 and 2.1 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00259 Published 2025-06-01 No fix listed CWE-613
TI-2025-24009 CVE-2025-33004 · GHSA-7wff-7hq6-6m3g

IBM Planning Analytics Local path traversal

Priority LOW 29

IBM Planning Analytics Local 2.0 and 2.1 could allow a privileged user to delete files from directories due to improper pathname restriction.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00478 Published 2025-06-01 No fix listed CWE-22
Priority LOW 24

IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00213 Published 2025-06-01 No fix listed CWE-79
Priority LOW 24

IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00215 Published 2025-06-01 No fix listed CWE-79