ibm planning analytics local

Name: ibm planning analytics local
Brand: ibm

productUS

cpe:2.3:a:ibm:planning_analytics_local:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

3critical4high17medium0low

updated 2026-10-25

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-4670US	critical9.1OT elevated	2.44% (84th)	—	no fix	2021-05-17	= 2.0.0
CVE-2020-4669US	critical9.1OT elevated	1.94% (80th)	—	no fix	2021-05-17	= 2.0.0
CVE-2020-4644US	medium5.4	1.23% (69th)	—	no fix	2020-07-29	2.0.0 → 2.0.9.1
CVE-2021-29739US	medium4.9	1.09% (65th)	—	no fix	2021-08-10	= 2.0.0
CVE-2020-4985US	high7.5	0.98% (62nd)	—	no fix	2021-05-14	= 2.0.0
CVE-2018-1676US	medium6.1	0.89% (59th)	—	no fix	2018-07-06	2.0.0 → 2.0.4
CVE-2025-36357US	—	0.87% (59th)	—	2.1.15	2025-11-17	2.1.0 → 2.1.15
CVE-2020-4503US	medium6.1	0.85% (58th)	—	2.0.9.1	2020-06-02	2.0.0 → 2.0.9.1
CVE-2020-4649US	medium4.3	0.82% (57th)	—	no fix	2020-11-03	≤ 2.0.9.2
CVE-2020-4367US	high7.5OT elevated	0.79% (56th)	—	2.0.9.1	2020-06-02	2.0.0 → 2.0.9.1
CVE-2020-4366US	medium6.1	0.73% (54th)	—	2.0.9.1	2020-06-02	2.0.0 → 2.0.9.1
CVE-2020-4360US	medium5.4	0.65% (51st)	—	2.0.9.1	2020-06-02	2.0.0 → 2.0.9.1
CVE-2020-4645US	medium5.4	0.56% (46th)	—	no fix	2020-07-29	2.0.0 → 2.0.9.1
CVE-2020-4431US	medium5.4	0.56% (46th)	—	2.0.9.1	2020-06-02	2.0.0 → 2.0.9.1
CVE-2020-4306US	medium5.4	0.56% (46th)	—	no fix	2020-05-29	2.0.0 → 2.0.9
CVE-2025-33004US	medium6.5	0.46% (39th)	—	no fix	2025-06-01	2 versions
CVE-2024-35143US	critical9.1OT elevated	0.43% (36th)	—	2.0.97	2024-08-04	2 versions
CVE-2026-10545US	high7.5	0.38% (31st)	—	no fix	2026-07-30	2.1.0 → 2.1.21
CVE-2023-28520US	medium5.4	0.35% (27th)	—	no fix	2023-05-12	= 2.0.0
CVE-2026-1267US	—	0.34% (27th)	—	2.1.18	2026-03-17	2.1.0 → 2.1.18
CVE-2025-14806US	—	0.30% (22nd)	—	2.1.18	2026-03-17	2.1.0 → 2.1.18
CVE-2025-36262US	—	0.30% (22nd)	—	no fix	2025-09-30	2 versions
CVE-2024-31908US	medium5.4	0.25% (15th)	—	no fix	2024-05-31	2 versions
CVE-2024-31907US	medium5.4	0.25% (15th)	—	no fix	2024-05-31	2 versions
CVE-2024-31889US	medium5.4	0.25% (15th)	—	no fix	2024-05-31	2 versions
CVE-2025-33005US	high8.8	0.25% (15th)	—	no fix	2025-06-01	2 versions
CVE-2025-36299US	—	0.23% (13th)	—	2.1.15	2025-11-17	2.1.0 → 2.1.15
CVE-2025-36437US	—	0.21% (11th)	—	2.1.16	2025-12-09	2.1.0 → 2.1.16
CVE-2025-25044US	—	0.21% (10th)	—	no fix	2025-06-01	2 versions
CVE-2025-2896US	medium5.4	0.20% (10th)	—	no fix	2025-06-01	2 versions
CVE-2025-36132US	—	0.19% (8th)	—	no fix	2025-09-30	2 versions
CVE-2026-13365US	medium6.5	0.17% (6th)	—	2.1.23	2026-08-13	2.0.0 → 2.1.23

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')14 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames1 CVEs
CWE-1188Initialization of a Resource with an Insecure Default1 CVEs
CWE-1286Improper Validation of Syntactic Correctness of Input1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan