Known vulnerabilities in Planning Analytics Local

Software CPE: cpe:2.3:a:ibm_corporation:planning_analytics_local:*:*:*:*:*:*:*:*
Total vulnerabilities: 222
Public exploits: 22
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Planning Analytics Local Planning Analytics Local is affected by 222 known vulnerabilities: 5 critical, 21 high, 119 medium, 77 low Critical High Medium Low

Vulnerabilities (222)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124051 - Use of Cache Containing Sensitive Information
CVE-2025-14806
CWE-524 Low
No
No
2.1.18 17.03.2026 SB2026031708
#VU124050 - Exposure of sensitive information to an unauthorized actor
CVE-2026-1267
CWE-200 Medium
No
No
2.1.18 17.03.2026 SB2026031708
#VU123159 - Incorrect Calculation of Buffer Size
CVE-2026-1188
CWE-131 High
No
No
2.1.19 24.02.2026 SB2026022412
SB2026022413
SB2026022531
and 46 more
#VU122150 - Uncaught Exception
CVE-2026-25128
CWE-248 Medium
Available
No
2.1.19 30.01.2026 SB2026013034
SB2026030312
SB2026030633
and 7 more
#VU121727 - Improper input validation
CVE-2026-21945
CWE-20 Medium
No
No
2.1.19 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121728 - Improper input validation
CVE-2026-21932
CWE-20 Medium
No
No
2.1.19 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 77 more
#VU121729 - Improper input validation
CVE-2026-21933
CWE-20 Medium
No
No
2.1.19 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 90 more
#VU121730 - Out-of-bounds read
CVE-2026-21925
CWE-125 Medium
No
No
2.1.19 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 92 more
#VU121159 - Resource exhaustion
CVE-2025-15284
CWE-400 Medium
No
No
2.1.18 12.01.2026 SB2026011229
SB2026011326
SB2026011926
and 38 more
#VU119901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12635
CWE-79 Medium
No
No
2.1.19 12.12.2025 SB2025121283
SB2025121517
SB2025121518
and 42 more
#VU119236 - Improper Certificate Validation
CVE-2025-61727
CWE-295 Low
No
No
2.1.18 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 21 more
#VU119235 - Resource exhaustion
CVE-2025-61729
CWE-400 Medium
No
No
2.1.18 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 146 more
#VU108849 - Inefficient Regular Expression Complexity
CVE-2025-25200
CWE-1333 Critical
No
No
2.0.0.103, 2.1.10 09.05.2025 SB2025050956
SB2025050957
#VU107638 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-1302
CWE-94 Critical
Available
No
2.0.0.103, 2.1.10 22.04.2025 SB2025042218
SB2025042219
SB2025050906
and 8 more
#VU105783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26791
CWE-79 Low
No
No
2.0.0.103, 2.1.10 17.03.2025 SB2025031740
SB2025031741
SB2025031771
and 35 more
#VU103770 - Improper input validation
CVE-2025-24970
CWE-20 Medium
No
No
2.0.0.103, 2.1.10 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU103455 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45336
CWE-200 Low
No
No
2.0.0.103, 2.1.10 30.01.2025 SB2025013039
SB2025013043
SB2025013044
and 38 more
#VU100117 - Improper input validation
CVE-2024-21534
CWE-20 High
Available
No
2.0.0.103, 2.1.10 08.11.2024 SB2024110840
SB2024110841
SB2024111516
and 17 more
#VU97216 - Resource exhaustion
CVE-2024-34156
CWE-400 Medium
No
No
2.0.0.103, 2.1.10 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 143 more
#VU93850 - Resource exhaustion
CVE-2024-24791
CWE-400 Medium
No
No
2.0.0.103, 2.1.10 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more


Showing elements 1 - 20 out of 222