CVE-2019-4716IBM Planning Analytics Remote Code Execution Vulnerability

IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094.

10.0 CRITICALEPSS 86.44%⚡ Known Exploited (CISA KEV)NVD: Published

Last updated: 2026-01-12 21:28 UTC

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
10.0	CRITICAL	3.0ibm (CNA)	CVSS:3.0/UI:N/AC:L/PR:N/I:H/S:C/AV:N/C:H/A:H/RC:C/RL:O/E:U

Details

CVE ID: CVE-2019-4716
Status: Published
Assigner (CNA): ibm
Published: Dec 18, 2019
Last modified: 2026-01-12 21:28 UTC
Weaknesses: CWE-94

Sources

NVD (unavailable at last refresh)
CVE.org
CISA KEV
FIRST EPSS

Refreshed hourly from the sources above. Last fetched 2026-11-07 14:00 UTC.