CVE-2025-36299: IBM Planning Analytics Local

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further attacks against the system.

Affected products

• IBM Planning Analytics Local: from 2.1.0, before 2.1.15 (fixed in 2.1.15)
• IBM Planning Analytics Workspace: from 2.1.0, before 2.1.15 (fixed in 2.1.15)

Published 2025-11-17. Last modified 2026-10-07.