Skip to contentHitachi Vantara Pentaho vulnerabilities
- hitachi vantara pentaho data integration and analytics, hitachi vantara pentaho data integration and analytics +1 moreHitachi Vantara Pentaho Data Integration & Analytics - Improper Restriction of XML External Entity ReferenceCVE-2026-22537.7 High
- hitachi vantara pentaho data integration and analytics, hitachi vantara pentaho data integration and analytics +1 moreHitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected CredentialsCVE-2026-22554.3 Medium
- hitachi vantara pentaho data integration and analytics, hitachi vantara pentaho data integration and analytics +1 moreHitachi Vantara Pentaho Data Integration & Analytics - Incorrect Permission Assignment for Critical ResourceCVE-2026-22546.3 Medium
- hitachi vantara pentaho data integration and analytics, hitachi vantara pentaho data integration and analytics +1 moreHitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party ComponentCVE-2025-111599.1 Critical
- hitachi vantara pentaho data integration and analytics, hitachi vantara pentaho data integration and analytics +1 moreHitachi Vantara Pentaho Data Integration & Analytics - Missing AuthorizationCVE-2025-111589.1 Critical
- hitachi vantara pentaho data integration & analytics, hitachi vantara pentaho data integration and analytics, hitachi vantara pentaho data integration \& analytics +2 moreHitachi Vantara Pentaho Data Integration & Analytics - Server-generated Error Message Containing Sensitive InformationCVE-2023-56175.3 Medium
- hitachi vantara pentaho, vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +2 moreHitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted DataCVE-2022-48158.0 High
- hitachi vantara pentaho, vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +2 moreHitachi Vantara Pentaho Business Analytics Server - Incorrect AuthorizationCVE-2023-11584.3 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2022-47715.4 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive InformationCVE-2022-47704.3 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive InformationCVE-2022-47694.3 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log FileCVE-2022-437723.8 Low
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')CVE-2022-39606.3 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity ReferenceCVE-2022-439417.1 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CVE-2022-43771EPSS 23.9%6.5 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Incorrect AuthorizationCVE-2022-439408.8 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server, pentaho business analytics (ba) server +2 moreHitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization DecisionsCVE-2022-43939In KEVPublic exploitEPSS 92.3%8.6 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')CVE-2022-43938EPSS 26.4%8.8 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical ResourceCVE-2022-43773EPSS 22.2%8.8 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server, pentaho business analytics (ba) server +2 moreHitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)CVE-2022-43769In KEVPublic exploitEPSS 97.7%8.8 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho +1 morePentaho Business Analytics Server - Pentaho Analyzer plugin exposes a service endpoint for templates which allows a user supplied path to access resources that are out of bounds.CVE-2021-454487.1 High
- hitachi vantara pentaho, hitachi vantara pentaho business analytics server +1 morePentaho Business Analytics Server - With the Data Lineage feature enabled, the system transmits database passwords in clear textCVE-2021-454477.7 High
- hitachi vantara pentaho, hitachi vantara pentaho business analytics server +1 morePentaho Business Analytics Server - Exposure of Information Through Directory ListingCVE-2021-454465.0 Medium
- hitachi vantara pentahoUploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify...CVE-2021-346852.7 Low
- hitachi vantara pentahoHitachi Vantara Pentaho Business Analytics through 9.1 allows an unauthenticated user to execute...CVE-2021-346849.8 Critical
- hitachi vantara pentaho, vantara pentaho business intelligence server +1 moreAn issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence...CVE-2021-31602Public exploitEPSS 51.7%5.3 Medium
- hitachi vantara pentaho, vantara pentaho business intelligence server +1 moreAn issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence...CVE-2021-316017.1 High
- hitachi vantara pentaho, vantara pentaho business intelligence server +1 moreAn issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence...CVE-2021-316004.3 Medium
- hitachi vantara pentaho, vantara pentaho business intelligence server +1 moreAn issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence...CVE-2021-315998.8 High
- hitachi vantara pentahoThe Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a stored Cross-site...CVE-2020-246665.4 Medium
- hitachi vantara pentahoThe dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site...CVE-2020-246645.4 Medium
- hitachi vantara pentahoThe Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site...CVE-2020-246705.4 Medium
- hitachi vantara pentahoThe New Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a DOM-based Cross...CVE-2020-246695.4 Medium
- hitachi vantara pentahoThe Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains an XML Entity...CVE-2020-246656.5 Medium