Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Hitachi Vantara Pentaho Business Analytics Server 9.3.0.3, 9.4.0.1 Clear all filters
TI-2022-04411 CVE-2022-4815 · GHSA-9ff4-rf5q-wgc5

Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data

Priority MEDIUM 41

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x deserialize untrusted JSON data without constraining the parser to approved classes and methods.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00628 Published 2023-05-24 Fixed in 9.3.0.3, 9.4.0.1 CWE-502
TI-2023-01096 CVE-2023-1158 · GHSA-3cr4-wh42-gq3c

Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization

Priority LOW 20

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users who are not part of the authorization list.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00381 Published 2023-05-24 Fixed in 9.3.0.3, 9.4.0.1 CWE-863