CVE-2024-40693CWE-434

IBM Planning Analytics file upload

High · published January 24, 2025

CVSS v3.1
8.0
EPSS
0%
Percentile
31.7
In the wild
Unconfirmed
What it is

IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00388 · 31.7th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-01-24T15:26Z
EPSS history
Timeline
  • 24 JAN 15:26Z
    IBM Planning Analytics file upload
    cvelistv5