Login Request a demo
VP
Product
Vantara Pentaho Business Analytics Server
by Hitachi · last CVE May 24, 2023
On CISA KEVExploited in the wild
14
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 1High 5Medium 8Low 0
Severity
All severities14Critical1High5Medium8Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Vantara Pentaho Business Analytics Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-43939
In wildKEV
9.8
92%
Apr 3
Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions
Affected: before 9.3.0.2; 9.4.0.0
CVE-2022-43769
In wildKEV
7.2
98%
Apr 3
Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
Affected: 8.3.0.0 before 9.3.0.2; 9.4.0.0
CVE-2022-4815
8.8
1%
May 24
Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data
Affected: 9.3.0.0 through 9.3.0.3; 9.4.0.0
CVE-2022-43940
8.8
1%
Apr 3
Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
Affected: before 9.3.0.2; 9.4.0.0
CVE-2022-43938
8.8
26%
Apr 3
Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
Affected: before 9.3.0.2; 9.4.0.0
CVE-2022-43773
8.8
22%
Apr 3
Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource
Affected: 8.3.0.0 before 9.3.0.2; 9.4.0.0
CVE-2022-43772
6.5
0%
Apr 3
Hitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log File
Affected: before 9.3.0.1
CVE-2022-43941
6.5
1%
Apr 3
Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference
Affected: before 9.3.0.2; 9.4.0.0
CVE-2022-43771
6.5
24%
Apr 3
Hitachi Vantara Pentaho Business Analytics Server - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected: before 9.3.0.1
CVE-2022-3960
6.3
0%
Apr 3
Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
Affected: before 9.3.0.2; 9.4.0.0
CVE-2022-4771
6.1
0%
Apr 3
Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected: before 9.3.0.2; 9.4.0.0
CVE-2023-1158
4.3
0%
May 24
Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
Affected: 9.3.0.0 through 9.3.0.3; 9.4.0.0
CVE-2022-4770
4.3
0%
Apr 3
Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information
Affected: before 9.3.0.2
CVE-2022-4769
4.3
0%
Apr 3
Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information
Affected: before 9.3.0.2
Showing 14