CVE-2024-35143Medium 6.7IBM Planning Analytics Local missing authentication0.4%
CVE-2024-31907Medium 5.4IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionalit0.2%
CVE-2024-31908Medium 6.4IBM Planning Analytics Local cross-site scripting0.2%
CVE-2024-31889Medium 5.4IBM Planning Analytics Local cross-site scripting0.2%
CVE-2023-28520Medium 6.4IBM Planning Analytics Local cross-site scripting0.4%
CVE-2021-29853Medium 4.3IBM Planning Analytics 2.0 could expose information that could be used to to create attacks by not validating the return values from some methods or functions. IBM X-Force ID: 205529.0.8%
CVE-2021-29852Medium 5.4IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially 0.5%
CVE-2021-29851Medium 4.3IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527.1.1%
CVE-2021-29739Low 2.7IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. X-Force ID: 198846.1.1%
CVE-2020-4670High 7.4IBM Planning Analytics Local 2.0 connects to a Redis server. The Redis server, an in-memory data structure store, running on the remote host is not protected by password authentication. A remote attac2.4%
CVE-2020-4669High 7.4IBM Planning Analytics Local 2.0 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password1.9%
CVE-2020-4985Low 3.7IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to accepting body parameters in a query. IBM X-Force ID: 192642.1.0%
CVE-2020-4649Medium 4.3IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022.0.8%
CVE-2020-4503Medium 6.1IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent0.8%
CVE-2020-4431Medium 5.4IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent0.6%
CVE-2020-4367Medium 5.9IBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 179001.0.8%
CVE-2020-4366Medium 6.1IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent0.7%
CVE-2020-4360Medium 5.4IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent0.7%
CVE-2020-4306Medium 5.4IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended func0.6%