Vulnerability Details CVE-2026-13365
IBM Planning Analytics 2.0, and 2.1 Local is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 1.6%
CVSS Severity
CVSS v3 Score 7.1
Products affected by CVE-2026-13365
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.0
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.1
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.106
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.2
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.3
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.4
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.9
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.9.1
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.9.2
-
cpe:2.3:a:ibm:planning_analytics_local:2.1.0
-
cpe:2.3:a:ibm:planning_analytics_local:2.1.1
-
cpe:2.3:a:ibm:planning_analytics_local:2.1.13
-
cpe:2.3:a:ibm:planning_analytics_local:2.1.14
-
cpe:2.3:a:ibm:planning_analytics_local:2.1.15
-
cpe:2.3:a:ibm:planning_analytics_local:2.1.16
-
cpe:2.3:a:ibm:planning_analytics_local:2.1.18
-
cpe:2.3:a:ibm:planning_analytics_local:2.1.2
-
cpe:2.3:a:ibm:planning_analytics_local:2.1.21
-
cpe:2.3:a:ibm:planning_analytics_local:2.1.3
-
cpe:2.3:a:ibm:planning_analytics_local:2.1.4