Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| IBM | Planning Analytics | affected |
|
No data.
No data.
No data available yet.
Vendor Solution
It is strongly recommended that you apply the most recent security updates: Affected Product(s)Version(s)FixIBM Planning Analytics Local2.1.0 - 2.1.23 IBM Planning Analytics Local 2.1.24 is now available for download from Fix Central https://w3.ibm.com/w3publisher/capa-release-announcements/2026-releases/pa-2026-releases IBM Planning Analytics Cloud environment has been remediated.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7291604 |
|
Mon, 12 Oct 2026 23:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. | |
| Title | IBM Planning Analytics Local is affected by security vulnerabilities | |
| First Time appeared |
Ibm
Ibm planning Analytics |
|
| Weaknesses | CWE-79 | |
| CPEs | cpe:2.3:a:ibm:planning_analytics:2.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:planning_analytics:2.1:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm planning Analytics |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2026-10-12T22:40:30.366Z
Reserved: 2026-07-31T20:51:03.198Z
Link: CVE-2026-18541
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-12T23:17:36.710
Modified: 2026-10-12T23:17:36.710
Link: CVE-2026-18541
Redhat
No data.
OpenCVE Enrichment
No data.