ZeroHour

CVE-2026-10545

CVSS 3.1
7.5 high
EPSS
<1%p13
Published
()
Modified
Description

IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user sessions.

Vendors
ibm
Products
planning analytics local
Weakness
CWE-601
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.