PA
Product
Planning Analytics Local
34
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 24Low 0
Watch
Add Planning Analytics Local to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-13365 | 6.5 | Aug 13 | IBM Planning Analytics Local is affected by security vulnerabilities Affected: 2.0.0 before 2.1.23 |
| CVE-2026-1267 | 6.5 | Mar 17 | IBM Planning Analytics Information Disclosure Affected: 2.1.0 through 2.1.17 |
| CVE-2025-33004 | 6.5 | Jun 1 | IBM Planning Analytics Local path traversal Affected: 2.0; 2.1 |
| CVE-2020-4503 | 6.1 | Jun 2 | IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting Affected: 2.0.0 before 2.0.9.1 |
| CVE-2020-4366 | 6.1 | Jun 2 | IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting Affected: 2.0.0 before 2.0.9.1 |
| CVE-2018-1676 | 6.1 | Jul 6 | IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting Affected: 2.0.0 through 2.0.4 |
| CVE-2025-14806 | 5.7 | Mar 17 | IBM Planning Analytics Information Disclosure Affected: 2.1.0 through 2.1.17 |
| CVE-2025-36132 | 5.4 | Sep 30 | IBM Planning Analytics Local cross-site scripting Affected: 2.0.0 through 2.0.106; 2.1.0 through 2.1.13 |
| CVE-2025-2896 | 5.4 | Jun 1 | IBM Planning Analytics Local cross-site scripting Affected: 2.0; 2.1 |
| CVE-2025-25044 | 5.4 | Jun 1 | IBM Planning Analytics Local cross-site scripting Affected: 2.0; 2.1 |
| CVE-2024-31907 | 5.4 | May 31 | IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting Affected: 2.0, 2.1 |
| CVE-2024-31908 | 5.4 | May 31 | IBM Planning Analytics Local cross-site scripting Affected: 2.0, 2.1 |
| CVE-2024-31889 | 5.4 | May 31 | IBM Planning Analytics Local cross-site scripting Affected: 2.0, 2.1 |
| CVE-2023-28520 | 5.4 | May 12 | IBM Planning Analytics Local 2.0 is vulnerable to stored cross-site scripting Affected: 2.0.0 |
| CVE-2020-4645 | 5.4 | Jul 29 | IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting Affected: 2.0.0 through 2.0.9.1 |
| CVE-2020-4644 | 5.4 | Jul 29 | IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the victim Affected: 2.0.0 through 2.0.9.1 |
| CVE-2020-4431 | 5.4 | Jun 2 | IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting Affected: 2.0.0 before 2.0.9.1 |
| CVE-2020-4360 | 5.4 | Jun 2 | IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting Affected: 2.0.0 before 2.0.9.1 |
| CVE-2020-4306 | 5.4 | May 29 | IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting Affected: 2.0.0 through 2.0.9 |
| CVE-2025-36262 | 4.9 | Sep 30 | IBM Planning Analytics Local information disclosure Affected: 2.0.0 through 2.0.106; 2.1.0 through 2.1.13 |
| CVE-2021-29739 | 4.9 | Aug 10 | IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser Affected: 2.0.0 |
| CVE-2025-36437 | 4.3 | Dec 9 | IBM Planning Analytics Local is vulnerable to disclosing sensitive information Affected: 2.1.0 through 2.1.15 |
| CVE-2025-36299 | 4.3 | Nov 17 | IBM Planning Analytics Information Disclosure Affected: 2.1.0 through 2.1.14 |
| CVE-2020-4649 | 4.3 | Nov 3 | IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions Affected: through 2.0.9.2 |
Showing 24