Matt Byrne

Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics version 2.0 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. Recommendations: For IBM Planning Analytics version 2.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

A vulnerability allows an unauthenticated remote user to read internal information.

A vulnerability allows an unauthenticated remote user to trigger a denial of service (DoS) condition because of Uncontrolled Resource Consumption.