A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2019-4716

IBM Planning Analytics Remote Code Execution Vulnerability

Published
2021-11-03
Modified
2026-07-31
Sources
cisa-kev

Summary

IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.