Yüksek CVSS 8
CVE-2025-36357: Planning Analytics Local: güvenlik açığı
Açıklama (NVD)
IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing absolute path sequences to view, read, or write arbitrary files on the system.
Özet bilgiler
- Ürün
- Ibm Planning Analytics Local
- CVSS v3.1
- 8
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - EPSS
- %0,87 (yüzdelik 59)
- CWE
- CWE-36
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| ibm-planning-analytics-local | 2.1.0 | — | 2.1.15 |
| ibm-planning-analytics-workspace | 2.1.0 | — | 2.1.15 |