CVE-2025-14806

—

CVSS 3.1

5.7 medium

EPSS

<1%p22

Published

Mar 17, 2026 (Mar 17, 2026)

Modified

Jun 17, 2026

Description

IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an attacker to trick the caching mechanism into storing and serving sensitive, user-specific responses as publicly cacheable resources.

Vendors: ibm
Products: planning analytics local
Weakness: CWE-524
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.