CVE-2022-22308

HIGH 7.8CVE-2022-22308 · Published 21/02/2022 · updated 17/06/2026

In short

CVE-2022-22308 is a HIGH (CVSS 7.8) vulnerability affecting planning analytics (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.75%, higher than 54.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
planning analytics ibm	`= 2.0`	No fix yet

Description

IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file include commands and the web application could be tricked into including remote files with malicious code. IBM X-Force ID: 216891.

References

exchange.xforce.ibmcloud.com/vulnerabilities/216891 · VDB Entry
ibm.com/support/pages/node/6557106 · Patch

More vulnerabilities in planning analytics

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

planning analytics

ibm

= 2.0

No fix yet

More vulnerabilities in planning analytics

See all →