Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Hitachi Vantara Pentaho Data Integration and Analytics 10.2.0.4 Clear all filters
TI-2025-08362 CVE-2025-9121 · GHSA-q8c7-8xpv-64vr

Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data

Priority MEDIUM 40

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constraining the parser to approved classes and meth…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00431 Published 2025-12-15 Fixed in 10.2.0.4 CWE-502
TI-2025-08363 CVE-2025-9122 · GHSA-6q25-989c-gvw8

Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information

Priority LOW 30

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCd…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00285 Published 2025-12-15 Fixed in 10.2.0.4 CWE-209