PD
Product
Pentaho Data Integration & Analytics
15
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 8Low 0
Watch
Add Pentaho Data Integration & Analytics to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24907 | 6.8 | Apr 16 | Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal Affected: 1.0 through 9.3.*; 10.0 before 10.2.0.2 |
| CVE-2025-24908 | 6.8 | Apr 16 | Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal Affected: 1.0 through 9.3.*; 10.0 before 10.2.0.2 |
| CVE-2024-37363 | 6.5 | Feb 19 | Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization Affected: 10.0 before 10.2.0.0 |
| CVE-2024-6697 | 6.5 | Feb 19 | Hitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges Affected: 10.0 before 10.2.0.0 |
| CVE-2024-37362 | 6.3 | Feb 19 | Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials Affected: 10.0 before 10.2.0.0 |
| CVE-2023-5617 | 5.3 | Feb 28 | Hitachi Vantara Pentaho Data Integration & Analytics - Server-generated Error Message Containing Sensitive Information Affected: 1.0 before 9.3.0.6; 9.4.0.0 before 10.1.0.0 |
| CVE-2024-6696 | 4.9 | Feb 19 | Hitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access Control Affected: 10.0 before 10.2.0.0 |
| CVE-2024-37360 | 4.4 | Feb 19 | Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affected: 10.0 before 10.2.0.0 |
Showing 8