PT-2025-40023 · Ibm · Ibm Planning Analytics Local

Published 2025-09-30 · Updated 2025-09-30 · CVE-2025-36262

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics Local versions 2.0.0 through 2.0.106 IBM Planning Analytics Local versions 2.1.0 through 2.1.13

Description A malicious privileged user may be able to bypass the user interface to obtain unauthorized access to sensitive information due to improper input validation.

Recommendations Update IBM Planning Analytics Local versions to a version later than 2.0.106 Update IBM Planning Analytics Local versions to a version later than 2.1.13

Fix

Weakness Enumeration

CWE-1286

Related Identifiers

BDU:2025-16309

CVE-2025-36262

Affected Products

Ibm Planning Analytics Local

References · 6

• https://osv.dev/vulnerability/CVE-2025-36262 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-16309 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-36262 · Security Note
• https://ibm.com/support/pages/node/7246602 · Patch, Vendor Advisory
• https://t.me/CVEtracker/33761 · Telegram Post
• https://twitter.com/CVEnew/status/1973119827934957609 · Twitter Post