IBM Planning Analytics Remote Code Execution Vulnerability

Mô tả

Tham khảo

• packetstormsecurity.com/files/156953/IBM-Cognos-TM1-IBM-Planning-Analytics-Server-Configuration-Overwrite-Code-Execution.html · Exploit
• seclists.org/fulldisclosure/2020/Mar/44 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/172094 · VDB Entry
• ibm.com/support/pages/node/1127781 · Patch
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2019-4716

Lỗ hổng khác của planning analytics

• CVE-2026-75063TRUNG BÌNH 5.4IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encod…
• CVE-2026-75061CAO 7.5IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially …
• CVE-2026-19627CAO 8.2IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due t…
• CVE-2026-19622NGHIÊM TRỌNG 9.8IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validatio…
• CVE-2026-19620CAO 8.8IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication.