Known vulnerabilities in Planning Analytics Local - page 3

Software CPE: cpe:2.3:a:ibm_corporation:planning_analytics_local:*:*:*:*:*:*:*:*
Total vulnerabilities: 222
Public exploits: 22
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Planning Analytics Local Planning Analytics Local is affected by 222 known vulnerabilities: 5 critical, 21 high, 119 medium, 77 low Critical High Medium Low

Vulnerabilities (222)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101723 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-47621
CWE-611 Medium
No
No
2.0.0.99, 2.1.6 11.12.2024 SB2024121198
SB2024121208
SB2025011711
and 2 more
#VU97478 - Inefficient Regular Expression Complexity
CVE-2024-41818
CWE-1333 Medium
No
No
2.0.0.99, 2.1.6 18.09.2024 SB2024091833
SB2024091834
SB2024092612
and 12 more
#VU97244 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-38999
CWE-1321 High
No
No
2.0.0.99, 2.1.6 13.09.2024 SB2024091339
SB2024091626
SB20241015165
and 13 more
#VU97243 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-38998
CWE-1321 High
No
No
2.0.0.99, 2.1.6 13.09.2024 SB2024091338
SB2024091626
SB2024103080
and 4 more
#VU96019 - Resource exhaustion
CVE-2024-38808
CWE-400 Medium
No
No
2.0.0.99, 2.1.6 14.08.2024 SB2024081480
SB2024092018
SB2024100315
and 24 more
#VU95816 - Server-Side Request Forgery (SSRF)
CVE-2024-29415
CWE-918 Medium
Available
No
2.0.0.99, 2.1.6 13.08.2024 SB2024081345
SB2024082612
SB2024082760
and 14 more
#VU94329 - NULL Pointer Dereference
CVE-2024-37890
CWE-476 Medium
No
No
2.0.0.99, 2.1.6 15.07.2024 SB2024071508
SB2024071933
SB2024081608
and 32 more
#VU93883 - Improper input validation
CVE-2024-37372
CWE-20 Low
No
No
2.0.0.99, 2.1.6 09.07.2024 SB2024070937
SB20240717120
SB2024072232
and 7 more
#VU93882 - Permissions, Privileges, and Access Controls
CVE-2024-22018
CWE-264 Low
No
No
2.0.0.99, 2.1.6 09.07.2024 SB2024070937
SB20240717120
SB2024072232
and 15 more
#VU93881 - Permissions, Privileges, and Access Controls
CVE-2024-36137
CWE-264 Low
No
No
2.0.0.99, 2.1.6 09.07.2024 SB2024070937
SB20240717120
SB2024072232
and 23 more
#VU93880 - Server-Side Request Forgery (SSRF)
CVE-2024-22020
CWE-918 Medium
No
No
2.0.0.99, 2.1.6 09.07.2024 SB2024070937
SB2024071636
SB20240717119
and 30 more
#VU93879 - Command injection
CVE-2024-36138
CWE-77 Medium
No
No
2.0.0.99, 2.1.6 09.07.2024 SB2024070937
SB2024071636
SB20240717119
and 12 more
#VU93545 - Server-Side Request Forgery (SSRF)
CVE-2024-39573
CWE-918 Medium
No
No
2.0.0.99, 2.1.6 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 46 more
#VU93544 - Improper input validation
CVE-2024-38477
CWE-20 Medium
No
No
2.0.0.99, 2.1.6 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 58 more
#VU93542 - Improper input validation
CVE-2024-38475
CWE-20 Critical
Available
No
2.0.0.99, 2.1.6 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU93541 - Improper input validation
CVE-2024-38474
CWE-20 Medium
No
No
2.0.0.99, 2.1.6 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 57 more
#VU93540 - Improper input validation
CVE-2024-38473
CWE-20 Medium
Available
No
2.0.0.99, 2.1.6 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 47 more
#VU89221 - Insufficient Verification of Data Authenticity
CVE-2024-34447
CWE-345 Medium
No
No
2.0.0.99, 2.1.6 07.05.2024 SB2024050731
SB2024070445
SB2024071844
and 15 more
#VU88462 - Command injection
CVE-2024-27980
CWE-77 Medium
No
No
2.0.0.99, 2.1.6 11.04.2024 SB2024041122
SB2024041155
SB2024041156
and 20 more
#VU63777 - Exposure of sensitive information to an unauthorized actor
CVE-2022-1650
CWE-200 Medium
No
No
2.0.0.99, 2.1.6 30.05.2022 SB2022053001
SB2022053002
SB2022061422
and 16 more


Showing elements 41 - 60 out of 222