CVE-2021-39040
HIGHIBM Planning Analytics Workspace 2.0 - Unrestricted Upload of File with Dangerous Type
Title source: llmDescription
IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. Attackers can make use of this weakness and upload malicious executable files into the system and it can be sent to victim for performing further attacks. IBM X-Force ID: 214025.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/pages/node/6574003
VDB Entry, Vendor Advisory vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/214025
Scores
CVSS v3
8.0
EPSS
0.0073
EPSS Percentile
49.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-434
Status
published
Products (1)
ibm/planning_analytics_workspace
2.0
Published
Apr 25, 2022
Tracked Since
Feb 18, 2026