Critical severity9.8CISA KEVNVD Advisory· Published Dec 18, 2019· Updated Jun 17, 2026

CVE-2019-4716

Description

IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Planning Analytics
cpe:2.3:a:ibm:planning_analytics:*:*:*:*:*:*:*:*
Range: >=2.0,<=2.0.8
IBM/IBM Planning Analyticsllm-fuzzy
Range: 2.0.0 - 2.0.8
IBM/Planning Analytics Localcpe-rescue
Range: 2.0.0

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/1127781nvdPatchVendor Advisory
packetstormsecurity.com/files/156953/IBM-Cognos-TM1-IBM-Planning-Analytics-Server-Configuration-Overwrite-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2020/Mar/44nvdExploitMailing ListThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/172094nvdVDB EntryVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.069
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.000