CVE-2025-25044: IBM Planning Analytics Local cross-site scripting
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Other sources
IBM Planning Analytics Local is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
— IBM
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-25044?
CVE-2025-25044 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-25044?
To fix CVE-2025-25044, update IBM Planning Analytics Local to version 2.2 or later.
What are the affected versions of CVE-2025-25044?
CVE-2025-25044 affects IBM Planning Analytics Local versions 2.0 and 2.1.
What type of vulnerability is CVE-2025-25044?
CVE-2025-25044 is a cross-site scripting (XSS) vulnerability.
Can CVE-2025-25044 lead to credential disclosure?
Yes, CVE-2025-25044 can lead to credential disclosure by allowing embedded JavaScript code execution.