Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Hitachi Vantara Pentaho Business Analytics Server 10.1.0.0, 9.3.0.7 Clear all filters
TI-2024-19174 CVE-2024-28984 · GHSA-h836-7w37-2mwc

Cross-site scripting in Hitachi Vantara Pentaho Business Analytics Server

Priority LOW 38

Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content into the Analyzer plugin interface.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00254 Published 2024-06-26 Fixed in 9.3.0.7, 10.1.0.0 CWE-79
TI-2024-19173 CVE-2024-28983 · GHSA-86gc-q5qm-hm5q

Cross-site scripting in Hitachi Vantara Pentaho Business Analytics Server

Priority LOW 38

Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content into the Analyzer plugin interface.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00292 Published 2024-06-26 Fixed in 9.3.0.7, 10.1.0.0 CWE-79
TI-2024-19172 CVE-2024-28982 · GHSA-3x45-j72c-xqpj

Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference

Priority LOW 36

Hitachi Vantara Pentaho Business Analytics Server versions before 10.1.0.0 and 9.3.0.7, including 8.3.x do not correctly protect the ACL service endpoint of the Pentaho User Console against XML External Entity Reference.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00379 Published 2024-06-26 Fixed in 9.3.0.7, 10.1.0.0 CWE-776