Hitachi Vantara vulnerabilities

Products

• Pentaho Business Analytics Server 37
• Pentaho Data Integration & Analytics 15
• Pentaho Data Integration And Analytics 7
• Pentaho Business Analytics (ba) Server 2
• Remot Ops Agent 2
• System Management Unit (smu) 2

Newest

• hitachi vantara remot ops agent Password Reset Code Accessible in User Listing API CVE-2026-108337 7.4 HighOctober 14, 2026
• hitachi vantara remot ops agent Token Signing Key Allows Unauthenticated Administrative Access CVE-2026-108336 9.1 CriticalOctober 14, 2026
• hitachi vantara remote ops agent Password Reset Functionality Missing Brute-Force Protection CVE-2026-108335 9.1 CriticalOctober 14, 2026
• hitachi vantara pentaho data integration and analytics, hitachi vantara pentaho data integration and analytics +1 more Hitachi Vantara Pentaho Data Integration & Analytics - Improper Restriction of XML External Entity Reference CVE-2026-2253 7.7 HighMay 27, 2026
• hitachi vantara pentaho data integration and analytics, hitachi vantara pentaho data integration and analytics +1 more Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials CVE-2026-2255 4.3 MediumMay 27, 2026
• hitachi vantara pentaho data integration and analytics, hitachi vantara pentaho data integration and analytics +1 more Hitachi Vantara Pentaho Data Integration & Analytics - Incorrect Permission Assignment for Critical Resource CVE-2026-2254 6.3 MediumMay 27, 2026
• hitachi vantara pentaho data integration and analytics, hitachi vantara pentaho data integration and analytics +1 more Hitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party Component CVE-2025-11159 9.1 CriticalMay 13, 2026
• hitachi vantara pentaho data integration and analytics, hitachi vantara pentaho data integration and analytics +1 more Hitachi Vantara Pentaho Data Integration & Analytics - Missing Authorization CVE-2025-11158 9.1 CriticalMarch 9, 2026
• hitachi vantara pentaho data integration and analytics Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data CVE-2025-9121 8.8 HighDecember 15, 2025
• hitachi vantara pentaho data integration and analytics Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information CVE-2025-9122 5.3 MediumDecember 15, 2025
• hitachi vantara pentaho data integration & analytics Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal CVE-2025-24907 6.8 MediumApril 16, 2025
• hitachi vantara pentaho business analytics server Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference CVE-2025-24911 4.9 MediumApril 16, 2025
• hitachi vantara pentaho business analytics server Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference CVE-2025-24910 4.9 MediumApril 16, 2025
• hitachi vantara pentaho business analytics server Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-24909 4.4 MediumApril 16, 2025
• hitachi vantara pentaho data integration & analytics Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal CVE-2025-24908 6.8 MediumApril 16, 2025
• hitachi vantara pentaho data integration & analytics Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection') CVE-2025-0756 9.1 CriticalApril 16, 2025
• hitachi vantara pentaho business analytics server Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-0757 4.4 MediumApril 16, 2025
• hitachi vantara pentaho business analytics server Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource CVE-2025-0758 6.1 MediumApril 16, 2025
• hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 more Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization CVE-2024-37363 6.5 MediumFebruary 19, 2025
• hitachi vantara pentaho data integration & analytics, pentaho business analytics server +1 more Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials CVE-2024-37362 6.3 MediumFebruary 19, 2025
• hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 more Hitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges CVE-2024-6697 6.5 MediumFebruary 19, 2025
• hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 more Hitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access Control CVE-2024-6696 4.9 MediumFebruary 19, 2025
• hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 more Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data CVE-2024-37361 9.9 CriticalFebruary 19, 2025
• hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 more Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-37360 4.4 MediumFebruary 19, 2025
• hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 more Hitachi Vantara Pentaho Business Analytics Server – Server Side Request Forgery CVE-2024-37359 8.6 HighFebruary 19, 2025
• hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 more Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization CVE-2024-5705 8.8 HighFebruary 19, 2025
• hitachi vantara pentaho data integration & analytics, pentaho business analytics server +1 more Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection') CVE-2024-5706 8.8 HighFebruary 19, 2025
• hitachi vantara pentaho data integration & analytics Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials CVE-2024-28981 8.5 HighSeptember 11, 2024
• hitachi pentaho business analytics server Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-28984 8.8 HighJune 26, 2024
• hitachi pentaho business analytics server Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-28983 8.8 HighJune 26, 2024
• hitachi pentaho business analytics server Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference CVE-2024-28982 7.1 HighJune 26, 2024
• hitachi vantara pentaho data integration & analytics, hitachi vantara pentaho data integration and analytics, hitachi vantara pentaho data integration \& analytics +2 more Hitachi Vantara Pentaho Data Integration & Analytics - Server-generated Error Message Containing Sensitive Information CVE-2023-5617 5.3 MediumFebruary 28, 2024
• hitachi vantara pentaho data integration & analytics, hitachi pentaho data integration and analytics +1 more Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection') CVE-2023-3517 8.5 HighDecember 12, 2023
• hitachi vantara system management unit (smu), hitachi system management unit firmware +1 more System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products is susceptible to unintended information disclosure via unprivileged access to SMU configuratio… CVE-2023-6538 Public exploit 7.6 HighDecember 11, 2023
• hitachi vantara system management unit (smu), system management unit, hitachi vantara hitachi network attached storage +2 more System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products are susceptible to unintended information disclosure via unprivileged access to HNAS configurat… CVE-2023-5808 Public exploit 7.6 HighDecember 4, 2023
• hitachi vantara pentaho business analytics server, hitachivantara pentaho business analytics +1 more Hitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Format CVE-2023-2358 4.3 MediumSeptember 26, 2023
• hitachi vantara pentaho, vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +2 more Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data CVE-2022-4815 8.0 HighMay 24, 2023
• hitachi vantara pentaho, vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +2 more Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization CVE-2023-1158 4.3 MediumMay 24, 2023
• hitachi vantara pentaho business analytics server, hitachivantara pentaho business analytics +1 more Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization CVE-2022-43770 5.4 MediumApril 11, 2023
• hitachi vantara pentaho business analytics server, hitachivantara pentaho business analytics +1 more Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation CVE-2022-3695 6.5 MediumApril 11, 2023
• hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 more Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-4771 5.4 MediumApril 3, 2023
• hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 more Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information CVE-2022-4770 4.3 MediumApril 3, 2023
• hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 more Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information CVE-2022-4769 4.3 MediumApril 3, 2023
• hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 more Hitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log File CVE-2022-43772 3.8 LowApril 3, 2023
• hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 more Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') CVE-2022-3960 6.3 MediumApril 3, 2023
• hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 more Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference CVE-2022-43941 7.1 HighApril 3, 2023
• hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 more Hitachi Vantara Pentaho Business Analytics Server - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-43771 EPSS 23.9% 6.5 MediumApril 3, 2023
• hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 more Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization CVE-2022-43940 8.8 HighApril 3, 2023
• hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server, pentaho business analytics (ba) server +2 more Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions CVE-2022-43939 In KEVPublic exploit EPSS 92.3% 8.6 HighApril 3, 2023
• hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 more Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') CVE-2022-43938 EPSS 26.4% 8.8 HighApril 3, 2023
• Show olderLoading…