CVE-2019-4716

IBM Planning Analytics Remote Code Execution Vulnerability

IBM — Planning Analytics

Added to KEV catalog: 3 November 2021
Federal remediation due date: 3 May 2022
Weakness classification (CWE): CWE-94

CISA Description

IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-4716

View on NVD View on MITRE CVE View full CISA catalog

More IBM Vulnerabilities

CVE-2026-9198

IBM Langflow Code Injection Vulnerability

CVE-2022-47986

IBM Aspera Faspex Code Execution Vulnerability

CVE-2013-3993

IBM InfoSphere BigInsights Invalid Input Vulnerability

CVE-2015-7450

IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.

CVE-2020-4430

IBM Data Risk Manager Directory Traversal Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services