Vulnerabilities > IBM > Planning Analytics Local

DATE CVE VULNERABILITY TITLE RISK
2020-07-29 CVE-2020-4645 Cross-site Scripting vulnerability in IBM Planning Analytics Local
IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2020-07-29 CVE-2020-4644 Improper Restriction of Rendered UI Layers or Frames vulnerability in IBM Planning Analytics Local
IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the victim.
network
low complexity
ibm CWE-1021
5.4
2020-06-02 CVE-2020-4503 Cross-site Scripting vulnerability in IBM Planning Analytics Local
IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
6.1
2020-06-02 CVE-2020-4431 Cross-site Scripting vulnerability in IBM Planning Analytics Local
IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2020-06-02 CVE-2020-4367 Use of a Broken or Risky Cryptographic Algorithm vulnerability in IBM Planning Analytics Local
IBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
network
low complexity
ibm CWE-327
7.5
2020-06-02 CVE-2020-4366 Cross-site Scripting vulnerability in IBM Planning Analytics Local
IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
6.1
2020-06-02 CVE-2020-4360 Cross-site Scripting vulnerability in IBM Planning Analytics Local
IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2020-05-29 CVE-2020-4306 Cross-site Scripting vulnerability in IBM Planning Analytics Local
IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2018-07-06 CVE-2018-1676 Cross-site Scripting vulnerability in IBM Planning Analytics Local
IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
6.1