IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7291604 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
15 Oct 2026, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ibm
Ibm planning Analytics |
|
| CPE | cpe:2.3:a:ibm:planning_analytics:2.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:planning_analytics:2.0:*:*:*:*:*:*:* |
|
| References | () https://www.ibm.com/support/pages/node/7291604 - Patch, Vendor Advisory |
12 Oct 2026, 23:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-12 23:17
Updated : 2026-10-15 19:15
NVD link : CVE-2026-75061
Mitre link : CVE-2026-75061
CVE.ORG link : CVE-2026-75061
JSON object : View
Products Affected
ibm
- planning_analytics
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')