BaselineWatch
Desk

CVE-2026-10545

7.5 high SSVC exploitation: none Analyzed

IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user sessions.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 7.5 · ibmNVD modified 2026-10-23 22:10

Affected (CPE criteria) 1

  • cpe:2.3:a:ibm:planning_analytics_local:*:*:*:*:*:*:*:*

References 1