4.3
CVE-2025-36299
- EPSS 0.03%
- Veröffentlicht 17.11.2025 20:15:51
- Zuletzt bearbeitet 19.11.2025 13:08:37
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
IBM Planning Analytics Information Disclosure
IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further attacks against the system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Planning Analytics Local Version >= 2.1.0 < 2.1.15
Ibm ≫ Planning Analytics Workspace Version >= 2.1.0 < 2.1.15
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.087 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| psirt@us.ibm.com | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
CWE-540 Inclusion of Sensitive Information in Source Code
Source code on a web server or repository often contains sensitive information and should generally not be accessible to users.