{"id":"CVE-2019-4716","aliases":[],"url":"https://o3.security/vulnerability/CVE-2019-4716","summary":"IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as \"admin\", and then execute code as root or SYSTEM…","details":"IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as \"admin\", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094.","published":"2019-12-18T17:16:43.863","modified":"2026-06-17T02:36:50.190","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.86441,"percentile":0.99723,"asOf":"2026-09-08"},"cisaKev":null,"exploitsKnown":5,"affectedPackages":[],"fix":null,"references":[{"type":"EXPLOIT","url":"http://packetstormsecurity.com/files/156953/IBM-Cognos-TM1-IBM-Planning-Analytics-Server-Configuration-Overwrite-Code-Execution.html"},{"type":"EXPLOIT","url":"http://seclists.org/fulldisclosure/2020/Mar/44"},{"type":"ADVISORY","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/172094"},{"type":"FIX","url":"https://www.ibm.com/support/pages/node/1127781"},{"type":"EXPLOIT","url":"http://packetstormsecurity.com/files/156953/IBM-Cognos-TM1-IBM-Planning-Analytics-Server-Configuration-Overwrite-Code-Execution.html"},{"type":"EXPLOIT","url":"http://seclists.org/fulldisclosure/2020/Mar/44"},{"type":"ADVISORY","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/172094"},{"type":"FIX","url":"https://www.ibm.com/support/pages/node/1127781"},{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-4716"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-17T02:36:50.190"}}