Vulnerabilities

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of…

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

IBM

Product

QRadar / WebSphere / Db2 / AIX / MQ / Maximo

CVSS

8.8

Exposure class

Web platform

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-19622 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 15
   CVE NVD 19d ago

   IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.

   CVSS 8.1 CVE-2026-85457 IBM
2. 8
   CVE NVD 19d ago

   IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding.

   CVSS 5.4 CVE-2026-75063 Oracle
3. 15
   CVE NVD 19d ago

   IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system.

   CVSS 7.5 CVE-2026-75061 IBM
4. 15
   CVE NVD 19d ago

   IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to…

   CVSS 8.2 CVE-2026-19627 IBM
5. 15
   CVE NVD 19d ago

   IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication.

   CVSS 8.8 CVE-2026-19620 IBM
6. 15
   CVE NVD 19d ago

   IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to…

   CVSS 7.1 CVE-2026-17475 IBM