Known vulnerabilities in IBM Planning Analytics Workspace

Vendor: IBM Corporation
Software: IBM Planning Analytics Workspace
Software CPE: cpe:2.3:a:ibm_corporation:ibm_planning_analytics_workspace:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 237
Public exploits: 15
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Planning Analytics Workspace IBM Planning Analytics Workspace is affected by 237 known vulnerabilities: 2 critical, 18 high, 172 medium, 45 low Critical High Medium Low

Vulnerabilities (237)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101344 - Integer overflow
CVE-2024-10917		 CWE-190 Low
No
No
 2.0.103, 2.1.10 09.12.2024 SB2024120927
SB2024120928
SB2024120929
and 66 more
#VU99654 - Missing Encryption of Sensitive Data
CVE-2021-3882		 CWE-311 Medium
No
No
 2.0.72 04.11.2024 SB2024110415
SB2024110416
SB2025071795
#VU98757 - Out-of-bounds write
CVE-2024-9143		 CWE-787 Low
No
No
 2.0.103, 2.1.10 16.10.2024 SB20241016108
SB2024102219
SB2024102417
and 59 more
#VU98647 - Improper input validation
CVE-2024-21208		 CWE-20 Low
No
No
 2.0.103, 2.1.10 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 139 more
#VU98648 - Improper input validation
CVE-2024-21217		 CWE-20 Low
No
No
 2.0.103, 2.1.10 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more
#VU88977 - Resource exhaustion
CVE-2024-25026		 CWE-400 Medium
No
No
 2.1.4 24.04.2024 SB2024042458
SB2024042525
SB2024042626
and 68 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329		 CWE-918 Medium
No
No
 2.1.4 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354		 CWE-611 High
No
No
 2.1.4 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU88173 - Resource exhaustion
CVE-2023-51775		 CWE-400 Medium
No
No
 2.1.4 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU86988 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-50312		 CWE-327 Low
No
No
 2.1.4 04.03.2024 SB2024030425
SB2024031819
SB2024032049
and 49 more
#VU85468 - Improper input validation
CVE-2024-20918		 CWE-20 Medium
No
No
 2.1.4 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85469 - Improper input validation
CVE-2024-20952		 CWE-20 Medium
No
No
 2.1.4 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85470 - Improper input validation
CVE-2024-20919		 CWE-20 Medium
No
No
 2.1.4 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85471 - Improper input validation
CVE-2024-20921		 CWE-20 Medium
No
No
 2.1.4 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 2.1.4 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 2.1.4 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965		 CWE-94 Critical
Available
Exploited
 2.0.76 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 2.0.72 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046		 CWE-94 High
Available
Exploited
 2.0.72 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 2.0.72 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more


Showing elements 1 - 20 out of 237