Skip to contentHitachi Vantara Pentaho Business Analytics Server vulnerabilities
- hitachi vantara pentaho business analytics serverHitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity ReferenceCVE-2025-249114.9 Medium
- hitachi vantara pentaho business analytics serverHitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity ReferenceCVE-2025-249104.9 Medium
- hitachi vantara pentaho business analytics serverHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2025-249094.4 Medium
- hitachi vantara pentaho business analytics serverHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2025-07574.4 Medium
- hitachi vantara pentaho business analytics serverHitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical ResourceCVE-2025-07586.1 Medium
- hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Incorrect AuthorizationCVE-2024-373636.5 Medium
- hitachi vantara pentaho data integration & analytics, pentaho business analytics server +1 moreHitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected CredentialsCVE-2024-373626.3 Medium
- hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or PrivilegesCVE-2024-66976.5 Medium
- hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access ControlCVE-2024-66964.9 Medium
- hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted DataCVE-2024-373619.9 Critical
- hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2024-373604.4 Medium
- hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 moreHitachi Vantara Pentaho Business Analytics Server – Server Side Request ForgeryCVE-2024-373598.6 High
- hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Incorrect AuthorizationCVE-2024-57058.8 High
- hitachi vantara pentaho data integration & analytics, pentaho business analytics server +1 moreHitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')CVE-2024-57068.8 High
- hitachi pentaho business analytics serverHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2024-289848.8 High
- hitachi pentaho business analytics serverHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2024-289838.8 High
- hitachi pentaho business analytics serverHitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity ReferenceCVE-2024-289827.1 High
- hitachi vantara pentaho business analytics server, hitachivantara pentaho business analytics +1 moreHitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable FormatCVE-2023-23584.3 Medium
- hitachi vantara pentaho, vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +2 moreHitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted DataCVE-2022-48158.0 High
- hitachi vantara pentaho, vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +2 moreHitachi Vantara Pentaho Business Analytics Server - Incorrect AuthorizationCVE-2023-11584.3 Medium
- hitachi vantara pentaho business analytics server, hitachivantara pentaho business analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Incorrect AuthorizationCVE-2022-437705.4 Medium
- hitachi vantara pentaho business analytics server, hitachivantara pentaho business analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page GenerationCVE-2022-36956.5 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2022-47715.4 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive InformationCVE-2022-47704.3 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive InformationCVE-2022-47694.3 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log FileCVE-2022-437723.8 Low
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')CVE-2022-39606.3 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity ReferenceCVE-2022-439417.1 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CVE-2022-43771EPSS 23.9%6.5 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Incorrect AuthorizationCVE-2022-439408.8 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server, pentaho business analytics (ba) server +2 moreHitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization DecisionsCVE-2022-43939In KEVPublic exploitEPSS 92.3%8.6 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')CVE-2022-43938EPSS 26.4%8.8 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical ResourceCVE-2022-43773EPSS 22.2%8.8 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server, pentaho business analytics (ba) server +2 moreHitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)CVE-2022-43769In KEVPublic exploitEPSS 97.7%8.8 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho +1 morePentaho Business Analytics Server - Pentaho Analyzer plugin exposes a service endpoint for templates which allows a user supplied path to access resources that are out of bounds.CVE-2021-454487.1 High
- hitachi vantara pentaho, hitachi vantara pentaho business analytics server +1 morePentaho Business Analytics Server - With the Data Lineage feature enabled, the system transmits database passwords in clear textCVE-2021-454477.7 High
- hitachi vantara pentaho, hitachi vantara pentaho business analytics server +1 morePentaho Business Analytics Server - Exposure of Information Through Directory ListingCVE-2021-454465.0 Medium