← Back to browse · API

CVE-2019-4716

Severity
CRITICAL
CVSS
10.0
EPSS
0.86441
Risk score
95.25
CISA KEV
Yes
PoC
No
Published
2021-11-03
Modified
2021-11-03
First seen
2026-08-07
Aliases
EUVD-2019-14323, GHSA-QRPQ-C83F-75R2
Products
IBM:Planning Analytics, IBM:Planning Analytics 2.0.0, IBM:Planning Analytics 2.0.8
Sources
euvd EUVD-2019-14323
cisa.gov CVE-2019-4716

Description

IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.

References