CVE-2019-4716
IBM Planning Analytics Remote Code Execution Vulnerability
CVSS
—
No CVSS
EPSS
86.4%
p100
KEV
YES
Nov 3, 2021
Exploit Today
80
0-100
Published: — · Last modified: —
86.4%EPSS · 30 days86.4%
2026-06-302026-07-16
Product
IBM / Planning Analytics
Vulnerability
IBM Planning Analytics Remote Code Execution Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
May 3, 2022
Known ransomware use
No
Summary description
IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2019-4716
No related CVEs by CWE or product.