CVE-2026-13365

HighCVSS 7.1

Published: 13/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 14/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

2th percentile - higher than 2% of all known CVEs

Summary

IBM Planning Analytics 2.0 and 2.1 Local is vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Risk Assessment

An attacker could exploit user trust to perform unauthorized operations in the system, such as configuration changes or data theft, without the victim's knowledge.

Recommendation

Implement CSRF protection mechanisms such as CSRF tokens and upgrade to a version that addresses this vulnerability.

Original NVD description (English source)

IBM Planning Analytics 2.0, and 2.1 Local is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.