Known vulnerabilities in Planning Analytics Local - page 9

Software CPE: cpe:2.3:a:ibm_corporation:planning_analytics_local:*:*:*:*:*:*:*:*
Total vulnerabilities: 222
Public exploits: 22
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Planning Analytics Local Planning Analytics Local is affected by 222 known vulnerabilities: 5 critical, 21 high, 119 medium, 77 low Critical High Medium Low

Vulnerabilities (222)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67156 - Missing Authorization
CVE-2021-20066
CWE-862 Medium
No
No
- 09.09.2022 SB2022091209
SB2023090426
#VU67154 - Incorrect Permission Assignment for Critical Resource
CVE-2021-20526
CWE-732 Medium
No
No
- 09.09.2022 SB2022091209
#VU66955 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7788
CWE-94 Medium
No
No
- 05.09.2022 SB2020121120
SB2022090501
SB2022091209
and 21 more
#VU61255 - Incorrect Regular Expression
CVE-2021-23362
CWE-185 Medium
No
No
- 11.03.2022 SB2021032315
SB2022031104
SB2022060315
and 28 more
#VU58206 - Absolute Path Traversal
CVE-2021-32803
CWE-36 Medium
No
No
- 17.11.2021 SB2021080329
SB2022031104
SB2022060618
and 26 more
#VU58205 - Absolute Path Traversal
CVE-2021-32804
CWE-36 Medium
No
No
- 17.11.2021 SB2021080328
SB2022031104
SB2022060618
and 27 more
#VU54625 - Incorrect Default Permissions
CVE-2021-22921
CWE-276 Low
No
No
2.0.1 08.07.2021 SB2021100417
SB2022031104
SB2022060315
and 7 more
#VU54624 - Out-of-bounds read
CVE-2021-22918
CWE-125 Medium
No
No
2.0.1 08.07.2021 SB2021070819
SB2021072009
SB2021081123
and 40 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290
CWE-312 Low
No
No
2.0.1 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 42 more
#VU52194 - Incorrect Regular Expression
CVE-2021-27290
CWE-185 Medium
No
No
- 12.03.2021 SB2021041364
SB2021070819
SB2021101939
and 32 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023
CWE-79 Low
Available
Exploited
- 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022
CWE-79 Low
Available
No
- 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU25598 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2019-20445
CWE-113 Medium
No
No
2.0.1 26.02.2020 SB2020012928
SB2020022601
SB2020031305
and 33 more
#VU25355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20444
CWE-444 Medium
No
No
2.0.1 14.02.2020 SB2020012928
SB2020022601
SB2020031305
and 36 more
#VU22825 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16869
CWE-444 Medium
No
No
2.0.1 18.11.2019 SB2019092616
SB2019111903
SB2019112016
and 30 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086
CWE-693 Low
No
No
2.0.1 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358
CWE-1321 Low
Available
No
- 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU12913 - Improper Authentication
CVE-2018-8012
CWE-287 Low
No
No
2.0.1 22.05.2018 SB2018052204
SB2018060404
SB2022072128
and 4 more
#VU6876 - Improper Access Control
CVE-2017-5637
CWE-284 Low
No
No
2.0.1 02.06.2017 SB2017060215
SB2021072820
SB2022072128
and 3 more
#VU40092 - Memory corruption
CVE-2016-5017
CWE-119 High
No
No
2.0.1 21.09.2016 SB2016092145
SB2022091313
SB2016122208
and 1 more


Showing elements 161 - 180 out of 222