Login Request a demo
PD
Product
Pentaho Data Integration & Analytics
by Hitachi Vantara · last CVE Apr 16, 2025
15
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 2High 5Medium 8Low 0
Severity
All severities15Critical2High5Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Pentaho Data Integration & Analytics to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-37361
9.9
1%
Feb 19
Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data
Affected: 10.0 before 10.2.0.0
CVE-2025-0756
9.1
1%
Apr 16
Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')
Affected: 10.0 before 10.2.0.2; 1.0 through 9.3.*
CVE-2024-5705
8.8
0%
Feb 19
Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
Affected: 10.0 before 10.2.0.0
CVE-2024-5706
8.8
1%
Feb 19
Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')
Affected: 10.0 before 10.2.0.0
CVE-2023-3517
8.8
1%
Dec 12
Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')
Affected: 1.0 before 9.3.0.5; 9.4.0.0 before 9.5.0.1
CVE-2024-37359
8.6
1%
Feb 19
Hitachi Vantara Pentaho Business Analytics Server – Server Side Request Forgery
Affected: 10.0 before 10.2.0.0
CVE-2024-28981
8.5
0%
Sep 11
Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials
Affected: 1.0 before 9.3.0.8; 9.4.0.0 before 10.1.0.0
CVE-2025-24907
6.8
0%
Apr 16
Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal
Affected: 1.0 through 9.3.*; 10.0 before 10.2.0.2
CVE-2025-24908
6.8
1%
Apr 16
Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal
Affected: 1.0 through 9.3.*; 10.0 before 10.2.0.2
CVE-2024-37363
6.5
0%
Feb 19
Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
Affected: 10.0 before 10.2.0.0
CVE-2024-6697
6.5
0%
Feb 19
Hitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges
Affected: 10.0 before 10.2.0.0
CVE-2024-37362
6.3
0%
Feb 19
Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials
Affected: 10.0 before 10.2.0.0
CVE-2023-5617
5.3
0%
Feb 28
Hitachi Vantara Pentaho Data Integration & Analytics - Server-generated Error Message Containing Sensitive Information
Affected: 1.0 before 9.3.0.6; 9.4.0.0 before 10.1.0.0
CVE-2024-6696
4.9
0%
Feb 19
Hitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access Control
Affected: 10.0 before 10.2.0.0
CVE-2024-37360
4.4
0%
Feb 19
Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected: 10.0 before 10.2.0.0
Showing 15