IBM Planning Analytics Remote Code Execution Vulnerability

概要

参考情報

• packetstormsecurity.com/files/156953/IBM-Cognos-TM1-IBM-Planning-Analytics-Server-Configuration-Overwrite-Code-Execution.html · Exploit
• seclists.org/fulldisclosure/2020/Mar/44 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/172094 · VDB Entry
• ibm.com/support/pages/node/1127781 · Patch
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2019-4716

planning analytics のその他の脆弱性

• CVE-2026-75063中 5.4IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encod…
• CVE-2026-75061高 7.5IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially …
• CVE-2026-19627高 8.2IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due t…
• CVE-2026-19622緊急 9.8IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validatio…
• CVE-2026-19620高 8.8IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication.