HV
Vendor
Hitachi Vantara
53
CVEs
4
On KEV
3
New 30D
Products
RO9.1
Remot Ops Agent
Hitachi Vantara
2 CVEs0 on KEV2 new
RO9.1
Remote Ops Agent
Hitachi Vantara
1 CVEs0 on KEV1 new
PB9.9
Pentaho Business Analytics Server
Hitachi Vantara
23 CVEs2 on KEV0 new
PB9.8
Pentaho Business Analytics (BA) Server
Hitachi Vantara
2 CVEs2 on KEV0 new
PD9.9
Pentaho Data Integration & Analytics
Hitachi Vantara
15 CVEs0 on KEV0 new
PD9.1
Pentaho Data Integration and Analytics
Hitachi Vantara
7 CVEs0 on KEV0 new
SM6.5
System Management Unit (SMU)
Hitachi Vantara
2 CVEs0 on KEV0 new
SM6.5
System Management Unit
Hitachi Vantara
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108337 | RO Remot Ops Agent Hitachi Vantara | 7.4 | Oct 14 | Password Reset Code Accessible in User Listing API |
| CVE-2026-108336 | RO Remot Ops Agent Hitachi Vantara | 9.1 | Oct 14 | Token Signing Key Allows Unauthenticated Administrative Access |
| CVE-2026-108335 | RO Remote Ops Agent Hitachi Vantara | 9.1 | Oct 14 | Password Reset Functionality Missing Brute-Force Protection |
| CVE-2026-2253 | PD Pentaho Data Integration and Analytics Hitachi Vantara | 7.7 | May 27 | Hitachi Vantara Pentaho Data Integration & Analytics - Improper Restriction of XML External Entity Reference |
| CVE-2026-2255 | PD Pentaho Data Integration and Analytics Hitachi Vantara | 4.3 | May 27 | Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials |
| CVE-2026-2254 | PD Pentaho Data Integration and Analytics Hitachi Vantara | 6.3 | May 27 | Hitachi Vantara Pentaho Data Integration & Analytics - Incorrect Permission Assignment for Critical Resource |
| CVE-2025-11159 | PD Pentaho Data Integration and Analytics Hitachi Vantara | 7.2 | May 13 | Hitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party Component |
| CVE-2025-11158 | PD Pentaho Data Integration and Analytics Hitachi Vantara | 9.1 | Mar 9 | Hitachi Vantara Pentaho Data Integration & Analytics - Missing Authorization |
| CVE-2025-9121 | PD Pentaho Data Integration and Analytics Hitachi Vantara | 8.8 | Dec 15 | Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data |
| CVE-2025-9122 | PD Pentaho Data Integration and Analytics Hitachi Vantara | 5.3 | Dec 15 | Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information |
| CVE-2025-24907 | PD Pentaho Data Integration & Analytics Hitachi Vantara | 6.8 | Apr 16 | Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal |
| CVE-2025-24911 | PB Pentaho Business Analytics Server Hitachi Vantara | 4.9 | Apr 16 | Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference |
| CVE-2025-24910 | PB Pentaho Business Analytics Server Hitachi Vantara | 4.9 | Apr 16 | Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference |
| CVE-2025-24909 | PB Pentaho Business Analytics Server Hitachi Vantara | 4.4 | Apr 16 | Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2025-24908 | PD Pentaho Data Integration & Analytics Hitachi Vantara | 6.8 | Apr 16 | Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal |
| CVE-2025-0756 | PD Pentaho Data Integration & Analytics Hitachi Vantara | 9.1 | Apr 16 | Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection') |
| CVE-2025-0757 | PB Pentaho Business Analytics Server Hitachi Vantara | 4.4 | Apr 16 | Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2025-0758 | PB Pentaho Business Analytics Server Hitachi Vantara | 6.1 | Apr 16 | Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource |
| CVE-2024-37363 | PB Pentaho Business Analytics Server Hitachi Vantara | 6.5 | Feb 19 | Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization |
| CVE-2024-37362 | PB Pentaho Business Analytics Server Hitachi Vantara | 6.3 | Feb 19 | Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials |
| CVE-2024-6697 | PB Pentaho Business Analytics Server Hitachi Vantara | 6.5 | Feb 19 | Hitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges |
| CVE-2024-6696 | PD Pentaho Data Integration & Analytics Hitachi Vantara | 4.9 | Feb 19 | Hitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access Control |
| CVE-2024-37361 | PD Pentaho Data Integration & Analytics Hitachi Vantara | 9.9 | Feb 19 | Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data |
| CVE-2024-37360 | PB Pentaho Business Analytics Server Hitachi Vantara | 4.4 | Feb 19 | Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2024-37359 | PB Pentaho Business Analytics Server Hitachi Vantara | 8.6 | Feb 19 | Hitachi Vantara Pentaho Business Analytics Server – Server Side Request Forgery |
| CVE-2024-5705 | PD Pentaho Data Integration & Analytics Hitachi Vantara | 8.8 | Feb 19 | Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization |
| CVE-2024-5706 | PB Pentaho Business Analytics Server Hitachi Vantara | 8.8 | Feb 19 | Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection') |
| CVE-2024-28981 | PD Pentaho Data Integration & Analytics Hitachi Vantara | 8.5 | Sep 11 | Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials |
| CVE-2024-28984 | PB Pentaho Business Analytics Server Hitachi Vantara | 6.1 | Jun 26 | Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2024-28983 | PB Pentaho Business Analytics Server Hitachi Vantara | 6.1 | Jun 26 | Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2024-28982 | PB Pentaho Business Analytics Server Hitachi Vantara | 8.2 | Jun 26 | Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference |
| CVE-2023-5617 | PD Pentaho Data Integration & Analytics Hitachi Vantara | 5.3 | Feb 28 | Hitachi Vantara Pentaho Data Integration & Analytics - Server-generated Error Message Containing Sensitive Information |
| CVE-2023-3517 | PD Pentaho Data Integration & Analytics Hitachi Vantara | 8.8 | Dec 12 | Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection') |
| CVE-2023-6538 | SM System Management Unit (SMU) Hitachi Vantara | 6.5 | Dec 11 | System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products is susceptible to unintended information disclosure via unprivileged access to SMU configuration backup data. |
| CVE-2023-5808 | SM System Management Unit (SMU) Hitachi Vantara | 6.5 | Dec 4 | System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products are susceptible to unintended information disclosure via unprivileged access to HNAS configuration backup and diagnostic data. |
| CVE-2023-2358 | PB Pentaho Business Analytics Server Hitachi Vantara | 4.9 | Sep 26 | Hitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Format |
| CVE-2022-43939 In wildKEV | PB Pentaho Business Analytics Server Hitachi Vantara | 9.8 | Apr 3 | Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions |
| CVE-2022-43769 In wildKEV | PB Pentaho Business Analytics Server Hitachi Vantara | 7.2 | Apr 3 | Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) |
| CVE-2021-45448 | PB Pentaho Business Analytics Server Hitachi Vantara | 6.5 | Nov 2 | Pentaho Business Analytics Server - Pentaho Analyzer plugin exposes a service endpoint for templates which allows a user supplied path to access resources that are out of bounds. |
| CVE-2021-45447 | PB Pentaho Business Analytics Server Hitachi Vantara | 7.5 | Nov 2 | Pentaho Business Analytics Server - With the Data Lineage feature enabled, the system transmits database passwords in clear text |
| CVE-2021-45446 | PB Pentaho Business Analytics Server Hitachi Vantara | 7.5 | Nov 2 | Pentaho Business Analytics Server - Exposure of Information Through Directory Listing |