CVE-2021-38873

IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection

Medium · published November 24, 2021

CVSS v3.0
6.8
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 208396.

The record
Technical detail
CVSS v3.0
6.8 · MEDIUM
Vector
CVSS:3.0/S:U/PR:H/A:H/I:H/AV:N/AC:L/C:H/UI:R/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01809 · 78.5th percentile
Published
2021-11-24T16:15Z
EPSS history
Timeline
  • 24 NOV 16:15Z
    IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection
    cvelistv5