CVE-2022-22392 MEDIUM

CVE-2022-22392

Vendor Ibm
Product Planning Analytics Workspace
Published April 25, 2022
Last update September 16, 2024

CVSS base score

6.8/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/PR:H/AC:L/S:U/I:H/UI:R/C:H/A:H/E:U/RL:O/RC:C

What the vulnerability does

01Description

IBM Planning Analytics Local 2.0 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim could result in code execution. IBM X-Force ID: 222066.

Key dates

02Disclosure timeline

April 25, 2022 CVE published
September 16, 2024 Record updated