CVE-2019-4716
IB
IBM Planning Analytics
IBM Planning Analytics Remote Code Execution Vulnerability
What it is
IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other IBM entries on the list
- Aspera Faspex IBM Aspera Faspex Incorrect Authorization Vulnerability CVE-2026-123218 · Nov 9, 2026
- Langflow IBM Langflow Code Injection Vulnerability CVE-2026-9198 · Aug 4, 2026
- Aspera Faspex IBM Aspera Faspex Code Execution Vulnerability CVE-2022-47986 · Feb 21, 2023
- InfoSphere BigInsights IBM InfoSphere BigInsights Invalid Input Vulnerability CVE-2013-3993 · May 25, 2022
- WebSphere Application Server and Server Hypervisor Edition IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. CVE-2015-7450 · Jan 10, 2022
- Data Risk Manager IBM Data Risk Manager Directory Traversal Vulnerability CVE-2020-4430 · Nov 3, 2021