Hitachi Vantara

Records57All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high25CVSS 7.0–8.9

Exploited now

Hitachi Vantara records in CISA KEV

TI-2022-21503 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability CRITICAL 97KEV 2025-03-03 TI-2022-21586 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability CRITICAL 99KEV 2025-03-03

Components

Products in the NVD configurations · select one to filter the records

Pentaho Business Analytics 4 records LOW

Records

4 records in Pentaho Business Analytics · all components

TI-2016-08742 CVE-2016-10701 · GHSA-2fjx-98mq-mq2j

In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application.

LOW 39

In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00773 Published 2017-11-28 No fix listed CWE-352

TI-2022-21504 CVE-2022-43770 · GHSA-j4q7-rgmr-c632

Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization

LOW 36

Hitachi Vantara Pentaho Business Analytics Server versions before 9.3.0.0, 9.2.0.4 and 8.3.0.27 does not correctly perform an authorization check in the dashboard editor plugin API.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00483 Published 2023-04-11 Fixed in 8.3.0.27, 9.2.0.4 CWE-863

TI-2022-03396 CVE-2022-3695 · GHSA-9fr3-c4cm-2x8r

Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation

LOW 29

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.3.0.0, 9.2.0.4 and 8.3.0.27 allow a malicious URL to inject content into a dashboard when the CDE plugin is present.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00353 Published 2023-04-11 Fixed in 8.3.0.27, 9.2.0.4 CWE-79

TI-2023-02213 CVE-2023-2358 · GHSA-cr32-vq7c-r25j

Hitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Format

LOW 22

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.5.0.0 and 9.3.0.4, including 8.3.x.x, saves passwords of the Hadoop Copy Files step in plaintext.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00282 Published 2023-09-26 Fixed in 9.3.0.5, 9.5.0.1 CWE-257

Open these records in search →