[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0IHYkHwHMUBZF87MBN-AIWlpwtIoZ2DzQVhbWQsDZ5Y":3,"g5a-risk:CVE-2021-39040":119},{"success":4,"data":5,"meta":117},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":50,"epssPercentile":26,"epssTimeSeries":51,"severity":52,"affectedProducts":53,"affectedProductsCount":58,"references":59,"referencesCount":70,"weaknesses":71,"weaknessesCount":58,"isActivelyExploited":80,"cisaInfo":26,"otxData":26,"relatedBlogPosts":81,"seoMetadata":82,"configurations":107,"relatedVendorCves":115,"notableEvents":116},"CVE-2021-39040","What is CVE-2021-39040?","IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. Attackers can make use of this weakness and upload malicious executable files into the system and it can be sent to victim for performing further attacks. IBM X-Force ID: 214025.","IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. Attackers can make use of this w...","2022-04-25T16:16:07.243","2022-05-03T19:36:59.753",8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":40,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","REQUIRED","UNCHANGED","HIGH",null,2.1,5.9,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":27,"ImpactScore":39},"psirt@us.ibm.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":25,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":38,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:H\u002FA:N","NONE",6.3,"MEDIUM",4.2,[41],{"Source":17,"Type":18,"CVSSData":42,"BaseSeverity":38,"ExploitabilityScore":48,"ImpactScore":49,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":4},{"Version":43,"VectorString":44,"AccessVector":21,"AccessComplexity":38,"Authentication":45,"ConfidentialityImpact":46,"IntegrityImpact":46,"AvailabilityImpact":46,"BaseScore":47,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6,6.8,6.4,0.00777,[50,50,50,50,50,50,50],"High",[54],{"vendor":55,"product":56,"version":43,"criteria":57,"vulnerable":4},"ibm","planning_analytics_workspace","cpe:2.3:a:ibm:planning_analytics_workspace:2.0:*:*:*:*:*:*:*",1,[60,66],{"url":61,"source":62,"tags":63},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F214025","Ibmcloud",[64,65],"VDB Entry","Vendor Advisory",{"url":67,"source":68,"tags":69},"https:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fpages\u002Fnode\u002F6574003","Ibm",[65],2,[72],{"id":73,"name":74,"description":75,"extendedDescription":76,"status":77,"abstraction":78,"structure":79},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",false,[],{"title":83,"metaDescription":84,"keywords":85,"canonicalUrl":86,"structuredData":87},"What is CVE-2021-39040? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-39040, a high severity cyber security vulnerability from 2022. IBM Planning Analytics Workspace 2.0 could be vulnerable to...","CVE-2021-39040, CVE-2021-39040 vulnerability, CVE-2021-39040 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, ibm security, planning_analytics_workspace vulnerability","\u002Fwhat-is\u002Fcve-2021-39040",{"@context":88,"@type":89,"headline":83,"description":84,"datePublished":10,"dateModified":11,"author":90,"publisher":94,"about":98,"mainEntityOfPage":102,"articleSection":105,"keywords":106},"https:\u002F\u002Fschema.org","TechArticle",{"@type":91,"name":92,"url":93},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":91,"name":92,"url":93,"logo":95},{"@type":96,"url":97},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":99,"name":6,"description":100,"additionalType":101},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":103,"@id":104},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-39040","Cybersecurity","CVE-2021-39040, CVE-2021-39040 vulnerability, CVE-2021-39040 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[108],{"Operator":26,"Negate":26,"Nodes":109},[110],{"Operator":111,"Negate":26,"CPEMatch":112},"OR",[113],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":114,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D7EF389F-9414-443F-A15D-8E83B7AC502C",[],[],{"lastModified":11,"cacheTime":118,"version":43},1793228698365,{"score":120,"band":121,"action":122,"scoredAt":123},47,"Medium","Plan remediation","2026-10-28T06:53:48.510763+00:00"]