IBM Planning Analytics Cloud vulnerabilities

2 CVEs affecting IBM Planning Analytics Cloud, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-4670, published 2021-05-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-4670, published 2021-05-17. Critical severity, CVSS 9.1. EPSS: 2.4% chance of exploitation in the next 30 days. IBM Planning Analytics Local 2.0 connects to a Redis server. The Redis server, an in-memory data structure store, running on the remote host is not protected by password authentication. A remote…
CVE-2020-4669, published 2021-05-17. Critical severity, CVSS 9.1. EPSS: 1.9% chance of exploitation in the next 30 days. IBM Planning Analytics Local 2.0 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without…