Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Hitachi Vantara Pentaho Business Analytics Server 9.3.0.2 Clear all filters
TI-2022-04366 CVE-2022-4770 · GHSA-h639-737x-65xp

Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information

Priority LOW 20

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the full parametrized SQL query in an error message when an invalid character is used within a Pentaho Repo…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00435 Published 2023-04-03 Fixed in 9.3.0.2 CWE-209
TI-2022-04365 CVE-2022-4769 · GHSA-8r7j-pj39-v7xh

Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information

Priority LOW 20

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the target path on host when a file is uploaded with an invalid character in its name.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00435 Published 2023-04-03 Fixed in 9.3.0.2 CWE-209