Read the docs

Pentaho

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Pentaho records in CISA KEV

No Pentaho vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bi Server 3 records LOW Business Analytics 1 record LOW Business Intelligence Suite 1 record MEDIUM Data Integration 1 record LOW

Records

1 record in Data Integration · all components

TI-2015-05788 CVE-2015-6940 · GHSA-p2w4-6crq-85gc

The GetResource servlet in Pentaho Business Analytics (BA) Suite 4.5.x, 4.8.x, and 5.0.x…

Priority LOW 27

The GetResource servlet in Pentaho Business Analytics (BA) Suite 4.5.x, 4.8.x, and 5.0.x through 5.2.x and Pentaho Data Integration (PDI) Suite 4.3.x, 4.4.x, and 5.0.x through 5.2.x does not restrict access to files in t…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02295 Published 2015-09-22 No fix listed CWE-200
Open these records in search →