CVE-2022-22308

IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack

High · published February 21, 2022

CVSS v3.0
7.1
EPSS
1%
Percentile
54.4
In the wild
Unconfirmed
What it is

IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file include commands and the web application could be tricked into including remote files with malicious code. IBM X-Force ID: 216891.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/S:U/PR:N/C:H/A:L/I:H/UI:R/AV:N/AC:H/RL:O/RC:C/E:U
CVSS v4.0
Not supplied
EPSS
0.00748 · 54.4th percentile
Published
2022-02-21T18:10Z
EPSS history
Timeline
  • 21 FEB 18:10Z
    IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack
    cvelistv5