Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 26

Export CSV
CVE-2022-43772

Hitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log File

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x with the Big Data Plugin expose the username and password of clusters in clear text into system logs. 

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed
Vendors
Hitachi
Products
Vantara Pentaho Business Analytics Server
CVE-2022-4769

Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the target path on host when a file is uploaded with an invalid character in its name. 

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hitachi
Products
Vantara Pentaho Business Analytics Server
CVE-2022-4770

Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the full parametrized SQL query in an error message when an invalid character is used within a Pentaho Report (*.prpt). 

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hitachi
Products
Vantara Pentaho Business Analytics Server
CVE-2022-4771

Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow a malicious URL to inject content into the Pentaho User Console through session variables. 

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Hitachi
Products
Vantara Pentaho Business Analytics Server
CVE-2023-1158

Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users who are not part of the authorization list. 

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hitachi
Products
Vantara Pentaho Vantara Pentaho Business Analytics Server
CVE-2022-4815

Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x deserialize untrusted JSON data without constraining the parser to approved classes and methods. 

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Hitachi
Products
Vantara Pentaho Vantara Pentaho Business Analytics Server