CVE-2026-75063: IBM Planning Analytics Local is affected by security vulnerabilities
Published Oct 12, 2026
·Updated
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding.
Affected Software
1 affected component
IBM Planning Analytics Local=2.0, =2.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Planning Analytics Localto a version that resolves this vulnerability.Fixed in 2.1.24
Event History
Oct 12, 2026
CVE Published
via MITRE·10:40 PM
Data Sourced
via MITRE·10:40 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The issue is exploitable remotely by an authenticated attacker. Exploitation also requires user interaction.
2
What is the potential impact?
An attacker could execute arbitrary JavaScript because output is not encoded properly. The listed impact includes low confidentiality and integrity impact, with no availability impact.
3
Which product versions are identified as affected?
IBM Planning Analytics versions 2.0 and 2.1 are identified as affected.