Cross-Site Request Forgery Vulnerability in IBM Planning Analytics
CVE-2026-13365

7.1HIGH

Key Information:

Vendor

IBM
Status
Planning Analytics
Vendor
CVE Published:
13 August 2026

What is CVE-2026-13365?

IBM Planning Analytics versions 2.0 and 2.1 are affected by a cross-site request forgery vulnerability that could allow malicious actors to perform unauthorized actions on behalf of trusted users. This issue exposes sensitive operations within the application, potentially leading to significant security breaches. It is crucial for users and administrators to apply the recommended patches and follow best practices to mitigate this risk.

Affected Version(s)

Planning Analytics 2.0

Planning Analytics 2.1

References

https://www.ibm.com/support/pages/node/7283486
vendor-advisorypatch

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.