ibm planning analytics

Name: ibm planning analytics
Brand: ibm

productUS

cpe:2.3:a:ibm:planning_analytics:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical11high22medium0low

updated 2026-10-28

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-4716US	critical9.8OT critical	86.4% (100th)	KEV	no fix	2019-12-18	2.0 → 2.0.8
CVE-2021-38873US	high7.8	1.81% (78th)	—	no fix	2021-11-24	= 2.0
CVE-2020-4527US	medium5.9	1.33% (71st)	—	no fix	2020-07-20	= 2.0
CVE-2020-4562US	medium5.3	1.27% (70th)	—	no fix	2021-04-26	= 2.0
CVE-2020-4953US	medium4.3	1.19% (68th)	—	no fix	2021-02-23	= 2.0
CVE-2021-20526US	medium5.3	1.11% (66th)	—	no fix	2021-10-27	= 2.0
CVE-2023-42017US	critical9.8	1.07% (65th)	—	no fix	2023-12-22	= 2.0
CVE-2021-29851US	medium4.3OT elevated	1.05% (64th)	—	no fix	2021-09-01	= 2.0
CVE-2020-4873US	medium5.3OT elevated	1.01% (63rd)	—	no fix	2021-01-19	= 2.0
CVE-2020-4361US	medium4.3	0.99% (62nd)	—	no fix	2020-07-20	= 2.0
CVE-2019-4612US	high8.8	0.95% (61st)	—	no fix	2019-12-09	= 2.0
CVE-2018-1933US	medium5.4	0.94% (61st)	—	no fix	2019-05-01	2.0 → 2.0.6
CVE-2020-4881US	high7.5	0.93% (60th)	—	no fix	2021-01-19	= 2.0
CVE-2021-39047US	medium6.1	0.92% (60th)	—	no fix	2022-06-24	= 2.0
CVE-2019-4134US	medium6.1	0.90% (60th)	—	no fix	2019-07-02	= 2.0
CVE-2020-4648US	medium6.5	0.89% (59th)	—	no fix	2020-08-19	= 2.0
CVE-2021-29853US	medium4.3	0.78% (56th)	—	no fix	2021-09-01	= 2.0
CVE-2022-22308US	high7.8	0.75% (55th)	—	no fix	2022-02-21	= 2.0
CVE-2020-4882US	medium6.1	0.74% (54th)	—	no fix	2021-03-22	= 2.0
CVE-2020-4653US	medium6.1	0.71% (53rd)	—	no fix	2020-08-19	= 2.0
CVE-2022-22339US	high7.3	0.65% (51st)	—	no fix	2022-04-08	= 2.0
CVE-2019-4611US	medium5.4	0.56% (46th)	—	no fix	2019-12-09	= 2.0
CVE-2021-29852US	medium5.4	0.53% (45th)	—	no fix	2021-09-01	= 2.0
CVE-2019-4613US	high8.8	0.53% (44th)	—	no fix	2020-02-05	= 2.0
CVE-2021-20477US	medium5.4	0.50% (43rd)	—	no fix	2021-06-29	= 2.0
CVE-2020-4764US	medium6.5	0.40% (34th)	—	no fix	2020-12-18	= 2.0
CVE-2024-25034US	high8.8	0.39% (33rd)	—	no fix	2025-01-24	2 versions
CVE-2024-40693US	—	0.39% (33rd)	—	no fix	2025-01-24	2 versions
CVE-2021-20580US	medium4.3	0.38% (31st)	—	no fix	2021-06-29	= 2.0
CVE-2026-75061US	high7.5	0.36% (30th)	—	no fix	2026-10-12	2 versions
CVE-2026-19627US	high8.2	0.35% (29th)	—	no fix	2026-10-12	2 versions
CVE-2026-19622US	critical9.8OT elevated	0.35% (28th)	—	no fix	2026-10-12	2 versions
CVE-2026-19620US	high8.8OT elevated	0.34% (27th)	—	no fix	2026-10-12	2 versions
CVE-2020-4871US	medium5.5	0.33% (26th)	—	no fix	2021-01-19	= 2.0
CVE-2026-17475US	high7.1	0.22% (12th)	—	no fix	2026-10-12	2 versions
CVE-2026-75063US	medium5.4	0.18% (7th)	—	no fix	2026-10-12	2 versions
CVE-2026-18541US	medium5.4	0.14% (3rd)	—	no fix	2026-10-12	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-352Cross-Site Request Forgery (CSRF)3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-285Improper Authorization2 CVEs
CWE-288Authentication Bypass Using an Alternate Path or Channel2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan