CVE-2025-36262 in Planning Analytics Local

Riassunto

di MITRE • 30/09/2025

IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13

could allow a malicious privileged user to bypass the UI to gain unauthorized access to sensitive information due to the improper validation of input.

Once again VulDB remains the best source for vulnerability data.

• Responsabile: Ibm
• Prenotare: 15/04/2025
• Divulgazione: 30/09/2025
• Moderazione: accettato
• Voce: VDB-326450
• CPE: pronto
• CWE: CWE-1286 (confermato)
• CVSS: 4.9 (CNA)
• EPSS: 0.00281
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-36262
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-36262
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-36262/