Cross-Site Scripting Vulnerability in IBM Planning Analytics Local
CVE-2020-4366

6.1MEDIUM

Key Information:

Vendor: IBM
Status: Planning Analytics Local
Vendor: CVE Published:; 2 June 2020

Summary

IBM Planning Analytics Local 2.0 is susceptible to a Cross-Site Scripting (XSS) vulnerability, which enables attackers to inject arbitrary JavaScript code into the Web UI. This flaw can compromise the intended functionality of the application, potentially leading to the disclosure of sensitive information, such as user credentials, during a trusted session. For more insights and remediation steps, refer to the IBM support page and the X-Force vulnerability entry.

Affected Version(s)

Planning Analytics Local 2.0

References

https://www.ibm.com/support/pages/node/6214472

x_refsource_CONFIRM

https://exchange.xforce.ibmcloud.com/vulnerabilities/178965

vdb-entryx_refsource_XF

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Jun 2, 2020
Vulnerability Reserved
Dec 30, 2019