CVE-2026-10545

HIGH

IBM Planning Analytics Local is affected by Open Redirect

Title source: cna

Description

IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user sessions.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory patch

https://www.ibm.com/support/pages/node/7278566

Scores

CVSS v3 7.5

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-601

Status published

Products (1)

IBM/Planning Analytics Local 2.1.0 - 2.1.21

Published Jul 30, 2026

Tracked Since Jul 31, 2026