CVE-2023-42017

CRITICAL 9.8CVE-2023-42017 · Published 22/12/2023 · updated 17/06/2026

In short

CVE-2023-42017 is a CRITICAL (CVSS 9.8) vulnerability affecting planning analytics (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
planning analytics ibm	`= 2.0`	No fix yet

Description

IBM Planning Analytics Local 2.0 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious script, which could allow the attacker to execute arbitrary code on the vulnerable system. IBM X-Force ID: 265567.

References

exchange.xforce.ibmcloud.com/vulnerabilities/265567 · VDB Entry
ibm.com/support/pages/node/7096528 · Vendor Advisory

More vulnerabilities in planning analytics

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

planning analytics

ibm

= 2.0

No fix yet

Description

More vulnerabilities in planning analytics

See all →