Ibm Planning Analytics Workspace — known CVE vulnerabilities

Every CVE whose affected-product data names Ibm Planning Analytics Workspace, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2021-39040 — CVSS 8.0 (high): IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. Attackers can…
• CVE-2025-36357 — CVSS 8.0 (high): IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system. An…
• CVE-2022-22392 — CVSS 7.8 (high): IBM Planning Analytics Local 2.0 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting…
• CVE-2024-35143 — CVSS 6.7 (medium): IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the…
• CVE-2025-36299 — CVSS 4.3 (medium): IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further attacks against the…
• CVE-2022-22314 — CVSS 3.3 (low): IBM Planning Analytics Local 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID…