CVE-2024-25034CWE-434

IBM Planning Analytics file upload

High · published January 24, 2025

CVSS v3.1
8.0
EPSS
0%
Percentile
32.1
In the wild
Unconfirmed
What it is

IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the type of file in the File Manager T1 process. Attackers can make use of this weakness and upload malicious executable files into the system that can be sent to victims for performing further attacks.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00392 · 32.1th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-01-24T15:25Z
EPSS history
Timeline
  • 24 JAN 15:25Z
    IBM Planning Analytics file upload
    cvelistv5