← Back

CVE-2026-10545

nvd nist
Published: Jul 30, 2026Modified: Aug 12, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.6 / Impact: 5.9
Source: psirt@us.ibm.com

Description

IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user sessions.

Affected (1)

Ibm
1 product
Planning Analytics Local
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Planning Analytics Local
From 2.1.0 to 2.1.21

Related CWEs

CWE-601
URL Redirection to Untrusted Site ('Open Redirect')
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.