Product by IBM
Planning Analytics Local
42 known vulnerabilities in Planning Analytics Local (IBM), 1 of them actively exploited (CISA KEV).
Key figures
42
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 158 other products | 7.5 | |
| Critical | CVE-2020-4670 | IBM Planning Analytics Local: security vulnerability | 7.4 | |
| Critical | CVE-2020-4669 | IBM Planning Analytics Local: security vulnerability | 7.4 | |
| High | CVE-2025-36357 | IBM Planning Analytics Local Directory Traversal | 8.0 | |
| High | CVE-2026-48043 | Netty: Missing Release of Memory after Effective Lifetime | 5.3 | |
| Medium | CVE-2020-4644 | IBM Planning Analytics: security vulnerability | 6.1 | |
| High | CVE-2026-10545 | IBM Planning Analytics Local is affected by Open Redirect | 7.5 | |
| High | CVE-2026-13365 | IBM Planning Analytics Local is affected by security vulnerabilities | 7.1 | |
| Medium | CVE-2019-4134 | IBM Planning Analytics Local: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2018-1676 | IBM Planning Analytics Local: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2020-4503 | IBM Planning Analytics Local: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2024-25034 | IBM Planning Analytics file upload | 8.0 | |
| High | CVE-2024-40693 | IBM Planning Analytics file upload | 8.0 | |
| High | CVE-2020-4367 | IBM Planning Analytics Local: security vulnerability | 5.9 | |
| Medium | CVE-2021-29851 | IBM Planning Analytics Local: Information Disclosure | 4.3 | |
| Medium | CVE-2025-33004 | IBM Planning Analytics Local path traversal | 6.5 | |
| Medium | CVE-2026-1267 | IBM Planning Analytics Information Disclosure | 6.5 | |
| Medium | CVE-2020-4366 | IBM Planning Analytics Local: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2026-47244 | Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced | 5.3 | |
| Critical | CVE-2024-35143 | IBM Planning Analytics Local missing authentication | 6.7 | |
| High | CVE-2020-4985 | IBM Planning Analytics Local: Information Disclosure | 3.7 | |
| Medium | CVE-2025-14806 | IBM Planning Analytics Information Disclosure | 5.7 | |
| Medium | CVE-2020-4360 | IBM Planning Analytics Local: Cross-Site Scripting (XSS) | 5.4 | |
| Medium | CVE-2021-29739 | IBM Planning Analytics Local: Information Disclosure | 2.7 | |
| Medium | CVE-2020-4649 | IBM Planning Analytics Local: security vulnerability | 4.3 |