Vulnerabilities

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to…

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to improper validation of file paths.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

IBM

Product

QRadar / WebSphere / Db2 / AIX / MQ / Maximo

CVSS

8.2

Exposure class

Web platform

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-19627 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 15
   CVE NVD 19d ago

   IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.

   CVSS 8.1 CVE-2026-85457 IBM
2. 8
   CVE NVD 19d ago

   IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding.

   CVSS 5.4 CVE-2026-75063 Oracle
3. 15
   CVE NVD 19d ago

   IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system.

   CVSS 7.5 CVE-2026-75061 IBM
4. 15
   CVE NVD 19d ago

   IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of…

   CVSS 8.8 CVE-2026-19622 IBM
5. 15
   CVE NVD 19d ago

   IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication.

   CVSS 8.8 CVE-2026-19620 IBM
6. 15
   CVE NVD 19d ago

   IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to…

   CVSS 7.1 CVE-2026-17475 IBM