Known vulnerabilities in Planning Analytics Local - page 8

Software CPE: cpe:2.3:a:ibm_corporation:planning_analytics_local:*:*:*:*:*:*:*:*
Total vulnerabilities: 222
Public exploits: 22
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Planning Analytics Local Planning Analytics Local is affected by 222 known vulnerabilities: 5 critical, 21 high, 119 medium, 77 low Critical High Medium Low

Vulnerabilities (222)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80848 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28520
CWE-79 Medium
No
No
2.0.9.17 18.09.2023 SB2023091817
SB2023103016
#VU76753 - Allocation of Resources Without Limits or Throttling
CVE-2023-28867
CWE-770 Medium
No
No
2.0.9.19 01.06.2023 SB2023060123
SB2023062739
SB2023063014
and 17 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998
CWE-770 Medium
Available
No
2.0.9.19 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU71288 - Improper input validation
CVE-2023-21830
CWE-20 Medium
No
No
2.0.9.19 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU71289 - Improper input validation
CVE-2023-21843
CWE-20 Low
No
No
2.0.9.19 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU70797 - Exposure of sensitive information to an unauthorized actor
CVE-2022-45787
CWE-200 Low
No
No
2.0.9.19 09.01.2023 SB2023010909
SB2023020878
SB2023031107
and 34 more
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165
CWE-444 Medium
No
No
2.0.9.16 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU67206 - Improper Access Control
CVE-2016-4437
CWE-284 High
Available
Exploited
2.0.1 13.09.2022 SB2022091313
SB2024120579
#VU62399 - Improper input validation
CVE-2022-21426
CWE-20 Medium
No
No
2.0.9.19 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more
#VU62401 - Improper input validation
CVE-2022-21434
CWE-20 Medium
No
No
2.0.9.15 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 111 more
#VU62402 - Improper input validation
CVE-2022-21443
CWE-20 Low
No
No
2.0.9.15 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 109 more
#VU57493 - Improper input validation
CVE-2021-35561
CWE-20 Medium
No
No
2.0.9.15 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 94 more
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21409
CWE-444 Medium
No
No
2.0.1 01.04.2021 SB2021040116
SB2021040626
SB2021050706
and 32 more
#VU50177 - Improper Authentication
CVE-2020-17523
CWE-287 High
Available
No
2.0.1 01.02.2021 SB2021020126
SB2022091313
#VU48197 - Improper Authentication
CVE-2020-17510
CWE-287 High
No
No
2.0.1 05.11.2020 SB2020110614
SB2022091313
SB2023090702
#VU45757 - Improper Authentication
CVE-2020-13933
CWE-287 Medium
Available
No
2.0.1 18.08.2020 SB2020081810
SB2022091313
SB2022102629
and 2 more
#VU45756 - Improper Authentication
CVE-2020-11989
CWE-287 Medium
Available
No
2.0.1 18.08.2020 SB2020062233
SB2021021824
SB2022091313
#VU26475 - Improper Authentication
CVE-2020-1957
CWE-287 Medium
No
No
2.0.1 31.03.2020 SB2020033112
SB2021021824
SB2022091313
#VU22836 - Cryptographic Issues
CVE-2019-12422
CWE-310 Medium
No
No
2.0.1 19.11.2019 SB2019111908
SB2020032701
SB2022091313
#VU18668 - Improper Access Control
CVE-2019-0201
CWE-284 Low
No
No
2.0.1 04.06.2019 SB2019061213
SB2019102004
SB2019112016
and 10 more


Showing elements 141 - 160 out of 222