Known vulnerabilities in Planning Analytics Local - page 10

Software CPE: cpe:2.3:a:ibm_corporation:planning_analytics_local:*:*:*:*:*:*:*:*
Total vulnerabilities: 222
Public exploits: 22
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Planning Analytics Local Planning Analytics Local is affected by 222 known vulnerabilities: 5 critical, 21 high, 119 medium, 77 low Critical High Medium Low

Vulnerabilities (222)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67178 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2020-28458
CWE-1321 Medium
Available
No
- 12.09.2022 SB2022091209
SB2022102678
SB2023030252
and 2 more
#VU61253 - Improper Certificate Validation
CVE-2021-22939
CWE-295 Medium
No
No
- 11.03.2022 SB2021081614
SB2022031104
SB2022060618
and 25 more
#VU59560 - Improper Authentication
CVE-2021-38892
CWE-287 Critical
No
No
2.0.9.11 12.01.2022 SB2022011224
#VU57498 - Improper input validation
CVE-2021-22931
CWE-20 High
No
No
- 19.10.2021 SB2021101945
SB2022020113
SB2022031104
and 28 more
#VU55315 - Incorrect Regular Expression
CVE-2021-23343
CWE-185 Medium
No
No
- 26.07.2021 SB2021072624
SB2021072625
SB2022060618
and 24 more
#VU55057 - Improper input validation
CVE-2021-2388
CWE-20 Medium
No
No
2.0.9.11 20.07.2021 SB2021072054
SB2021072055
SB2021072201
and 62 more
#VU55058 - Improper Verification of Cryptographic Signature
CVE-2021-2369
CWE-347 Low
No
No
2.0.9.11 20.07.2021 SB2021072054
SB2021072055
SB2021072201
and 76 more
#VU54853 - Resource exhaustion
CVE-2021-36090
CWE-400 Medium
No
No
2.0.9.11 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU54852 - Resource exhaustion
CVE-2021-35517
CWE-400 Medium
No
No
2.0.9.11 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 33 more
#VU52909 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7774
CWE-94 Medium
No
No
- 06.05.2021 SB2020111735
SB2021050615
SB2021092814
and 24 more
#VU52448 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-2161
CWE-94 Medium
No
No
2.0.9.11 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 45 more
#VU49916 - Stack-based buffer overflow
CVE-2020-27221
CWE-121 High
No
No
2.0.9.11 21.01.2021 SB2021012130
SB2021030504
SB2021030505
and 16 more
#VU47778 - Improper input validation
CVE-2020-14782
CWE-20 Low
No
No
2.0.9.11 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 52 more
#VU47779 - Improper input validation
CVE-2020-14797
CWE-20 Low
No
No
2.0.9.11 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 46 more
#VU47780 - Improper input validation
CVE-2020-14779
CWE-20 Low
No
No
2.0.9.11 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 46 more
#VU47781 - Improper input validation
CVE-2020-14796
CWE-20 Low
No
No
2.0.9.11 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 42 more
#VU30273 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4360
CWE-79 Low
No
No
2.0.9.1 02.06.2020 SB2020060220
#VU30274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4366
CWE-79 Low
No
No
2.0.9.1 02.06.2020 SB2020060220
#VU30275 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-4367
CWE-327 Medium
No
No
2.0.9.1 02.06.2020 SB2020060220
#VU30276 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4431
CWE-79 Low
No
No
2.0.9.1 02.06.2020 SB2020060220


Showing elements 181 - 200 out of 222