Lucene search
+L

819 matches found

OSV
OSV
•added 2020/12/18 3:15 p.m.•18 views

CVE-2020-4764

IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 188898...

6.5CVSS5.3AI score0.00403EPSS
SaveExploits0References2
NVD
NVD
•added 2020/12/18 3:15 p.m.•30 views

CVE-2020-4764

IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 188898...

6.5CVSS5.1AI score0.00403EPSS
SaveExploits0References2
Prion
Prion
•added 2020/12/18 3:15 p.m.•21 views

Cross site request forgery (csrf)

IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 188898...

4.3CVSS6.4AI score0.00403EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/12/18 3:00 p.m.•32 views

CVE-2020-4764

IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 188898...

4.3CVSS6.4AI score0.00403EPSS
SaveExploits0References2
CVE
CVE
•added 2020/12/18 3:00 p.m.•67 views

CVE-2020-4764

CVE-2020-4764 affects IBM Planning Analytics 2.0, vulnerable to Cross-Site Request Forgery (CSRF) that could allow an attacker to perform malicious, unauthorized actions on behalf of a trusted user. The IBM Security Bulletin confirms remediation in IBM Planning Analytics 2.0 with the release of L...

6.5CVSS6.4AI score0.00403EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/18 12:00 a.m.•2 views

CVE-2020-4764: Cross-Site Request Forgery (CSRF)

IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 188898...

6.5CVSS6AI score0.00403EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/12/18 12:00 a.m.•3 views

PT-2020-18232

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics version 2.0 Description The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery. Recommendations For IBM Planning...

6.5CVSS0.00403EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2020/12/17 12:00 a.m.•7 views

CVE-2020-4764

IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 188898...

6.5CVSS5.3AI score0.00403EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2020/12/17 12:00 a.m.•18 views

IBM Planning Analytics 跨站请求伪造漏洞

IBM Planning Analytics is a planning, budgeting, forecasting and analytics solution. A cross-site request forgery vulnerability exists in IBM Planning Analytics 2.0. An attacker could exploit this vulnerability to perform malicious and unauthorized actions transmitted from a user trusted by the...

6.5CVSS5.9AI score0.00403EPSS
SaveExploits0References4
CNVD
CNVD
•added 2020/11/04 12:00 a.m.•14 views

IBM Planning Analytics Local and IBM Planning Analytics Workspace Information Disclosure Vulnerability

IBM Planning Analytics is a suite of business planning analytics solutions from IBM USA. The solution supports automated execution of business planning, budgeting, and analysis processes.Planning Analytics Workspace is the Web management interface for IBM Planning Analytics. An information...

4.3CVSS6.2AI score0.00816EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2020/11/03 3:37 p.m.•37 views

Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics Workspace

Summary This Security Bulletin addresses multiple vulnerabilities in Node.js that have been remediated in IBM Planning Analytics Workspace Release 58. Vulnerability Details CVEID: CVE-2019-15604 DESCRIPTION: Node.js is vulnerable to a denial of service, caused by improper certificate validation. ...

9.8CVSS7.3AI score0.57132EPSS
SaveExploits4Affected Software1
OSV
OSV
•added 2020/11/03 2:15 p.m.•15 views

CVE-2020-4649

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022...

4.3CVSS5.8AI score0.00816EPSS
SaveExploits0References2
NVD
NVD
•added 2020/11/03 2:15 p.m.•34 views

CVE-2020-4649

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022...

4.3CVSS4.4AI score0.00816EPSS
SaveExploits0References2
Prion
Prion
•added 2020/11/03 2:15 p.m.•29 views

Code injection

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022...

4CVSS4.4AI score0.00816EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2020/11/03 1:25 p.m.•71 views

CVE-2020-4649

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 expose data to non-privileged users due to not invalidating TM1Web sessions (information disclosure). The issue affects Local 2.0.9.2 and Workspace 57, with remediation in IBM Planning Analytics Local 2.0.9.3 and Plannin...

4.3CVSS5.3AI score0.00816EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/11/03 1:25 p.m.•39 views

CVE-2020-4649

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022...

4.3CVSS4.4AI score0.00816EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/11/03 12:00 a.m.•6 views

PT-2020-18184

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics Local version 2.0.9.2 IBM Planning Analytics Workspace version 57 Description The issue could expose data to non-privileged users due to the failure to invalidate TM1Web user sessions. Recommendations For IBM Planning...

4.3CVSS0.00816EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/03 12:00 a.m.•8 views

CVE-2020-4649: Exposure of Sensitive Information to an Unauthorized Actor

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022...

4.3CVSS5.7AI score0.00816EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2020/11/02 5:40 p.m.•45 views

Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics

Summary This Security Bulletin addresses multiple vulnerabilities that have been remediated in IBM Planning Analytics Local 2.0.9.3 and IBM Planning Analytics Workspace Release 58. There are multiple vulnerabilities in IBM® Runtime Environment Java™ used by IBM Planning Analytics and IBM Planning...

8.8CVSS6.9AI score0.14066EPSS
SaveExploits4Affected Software1
attackerkb
attackerkb
•added 2020/11/02 12:00 a.m.•8 views

CVE-2020-4649

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022...

4.3CVSS5.3AI score0.00816EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder