Cross-Site Scripting Vulnerability in IBM Planning Analytics

CVE-2020-4306

What is CVE-2020-4306?

A cross-site scripting (XSS) vulnerability exists in IBM Planning Analytics Local versions 2.0.0 to 2.0.9. This vulnerability enables attackers to inject arbitrary JavaScript code into the web user interface, potentially compromising the security of users' sessions and leading to the disclosure of sensitive credentials. The flaw could be exploited by malicious actors to manipulate the intended functionality of the application. For more information, refer to IBM's support page and the X-Force ID entry.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References