CVE-2022-22339: IBM Planning Analytics

High severity, CVSS 7.3. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM Planning Analytics 2.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 219736.

Affected products

• IBM Planning Analytics: version 2.0 only

Published 2022-04-08. Last modified 2026-06-17.