IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user sessions.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.ibm.com/support/pages/node/7278566 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.5 · ibmNVD modified 2026-10-23 22:10
Affected (CPE criteria) 1
cpe:2.3:a:ibm:planning_analytics_local:*:*:*:*:*:*:*:*
References 1
- https://www.ibm.com/support/pages/node/7278566 Vendor Advisory