agentprime: hitachi-vantara-pentaho-business-analytics-serverEvery new CVE for hitachi-vantara-pentaho-business-analytics-server.https://agentprime.io/CVE-2025-24911: Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Referencehttps://agentprime.io/advisories/CVE-2025-24911/https://agentprime.io/advisories/CVE-2025-24911/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Apr 2025 22:35:10 GMTCVECVE-2025-24910: Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Referencehttps://agentprime.io/advisories/CVE-2025-24910/https://agentprime.io/advisories/CVE-2025-24910/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Apr 2025 22:32:46 GMTCVECVE-2025-24909: Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')https://agentprime.io/advisories/CVE-2025-24909/https://agentprime.io/advisories/CVE-2025-24909/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Apr 2025 22:30:10 GMTCVECVE-2025-0757: Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')https://agentprime.io/advisories/CVE-2025-0757/https://agentprime.io/advisories/CVE-2025-0757/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Apr 2025 22:18:19 GMTCVECVE-2025-0758: Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resourcehttps://agentprime.io/advisories/CVE-2025-0758/https://agentprime.io/advisories/CVE-2025-0758/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Apr 2025 22:12:29 GMTCVECVE-2024-37363: Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorizationhttps://agentprime.io/advisories/CVE-2024-37363/https://agentprime.io/advisories/CVE-2024-37363/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 23:40:10 GMTCVECVE-2024-37362: Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentialshttps://agentprime.io/advisories/CVE-2024-37362/https://agentprime.io/advisories/CVE-2024-37362/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 23:34:29 GMTCVECVE-2024-6697: Hitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privilegeshttps://agentprime.io/advisories/CVE-2024-6697/https://agentprime.io/advisories/CVE-2024-6697/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 23:32:18 GMTCVECVE-2024-6696: Hitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access Controlhttps://agentprime.io/advisories/CVE-2024-6696/https://agentprime.io/advisories/CVE-2024-6696/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 23:29:43 GMTCVECVE-2024-37361: Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Datahttps://agentprime.io/advisories/CVE-2024-37361/https://agentprime.io/advisories/CVE-2024-37361/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 23:25:33 GMTCVEcriticalCVE-2024-37360: Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')https://agentprime.io/advisories/CVE-2024-37360/https://agentprime.io/advisories/CVE-2024-37360/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 23:01:41 GMTCVECVE-2024-37359: Hitachi Vantara Pentaho Business Analytics Server – Server Side Request Forgeryhttps://agentprime.io/advisories/CVE-2024-37359/https://agentprime.io/advisories/CVE-2024-37359/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 22:58:57 GMTCVECVE-2024-5705: Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorizationhttps://agentprime.io/advisories/CVE-2024-5705/https://agentprime.io/advisories/CVE-2024-5705/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 22:55:08 GMTCVECVE-2024-5706: Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')https://agentprime.io/advisories/CVE-2024-5706/https://agentprime.io/advisories/CVE-2024-5706/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 22:49:46 GMTCVECVE-2024-28984: Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')https://agentprime.io/advisories/CVE-2024-28984/https://agentprime.io/advisories/CVE-2024-28984/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Jun 2024 22:41:57 GMTCVECVE-2024-28983: Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')https://agentprime.io/advisories/CVE-2024-28983/https://agentprime.io/advisories/CVE-2024-28983/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Jun 2024 22:40:15 GMTCVECVE-2024-28982: Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Referencehttps://agentprime.io/advisories/CVE-2024-28982/https://agentprime.io/advisories/CVE-2024-28982/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Jun 2024 22:37:01 GMTCVECVE-2023-2358: Hitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Formathttps://agentprime.io/advisories/CVE-2023-2358/https://agentprime.io/advisories/CVE-2023-2358/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Sep 2023 21:34:06 GMTCVECVE-2022-4815: Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Datahttps://agentprime.io/advisories/CVE-2022-4815/https://agentprime.io/advisories/CVE-2022-4815/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 May 2023 21:30:37 GMTCVECVE-2023-1158: Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorizationhttps://agentprime.io/advisories/CVE-2023-1158/https://agentprime.io/advisories/CVE-2023-1158/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 May 2023 21:26:53 GMTCVECVE-2022-43770: Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorizationhttps://agentprime.io/advisories/CVE-2022-43770/https://agentprime.io/advisories/CVE-2022-43770/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Apr 2023 15:48:16 GMTCVECVE-2022-3695: Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generationhttps://agentprime.io/advisories/CVE-2022-3695/https://agentprime.io/advisories/CVE-2022-3695/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Apr 2023 15:45:03 GMTCVECVE-2022-4771: Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')https://agentprime.io/advisories/CVE-2022-4771/https://agentprime.io/advisories/CVE-2022-4771/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Apr 2023 18:58:44 GMTCVECVE-2022-4770: Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Informationhttps://agentprime.io/advisories/CVE-2022-4770/https://agentprime.io/advisories/CVE-2022-4770/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Apr 2023 18:56:17 GMTCVECVE-2022-4769: Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Informationhttps://agentprime.io/advisories/CVE-2022-4769/https://agentprime.io/advisories/CVE-2022-4769/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Apr 2023 18:53:51 GMTCVECVE-2022-43772: Hitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log Filehttps://agentprime.io/advisories/CVE-2022-43772/https://agentprime.io/advisories/CVE-2022-43772/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Apr 2023 18:50:58 GMTCVECVE-2022-3960: Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')https://agentprime.io/advisories/CVE-2022-3960/https://agentprime.io/advisories/CVE-2022-3960/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Apr 2023 18:48:00 GMTCVECVE-2022-43941: Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Referencehttps://agentprime.io/advisories/CVE-2022-43941/https://agentprime.io/advisories/CVE-2022-43941/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Apr 2023 18:44:41 GMTCVECVE-2022-43771: Hitachi Vantara Pentaho Business Analytics Server - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')https://agentprime.io/advisories/CVE-2022-43771/https://agentprime.io/advisories/CVE-2022-43771/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Apr 2023 18:40:01 GMTCVECVE-2022-43940: Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorizationhttps://agentprime.io/advisories/CVE-2022-43940/https://agentprime.io/advisories/CVE-2022-43940/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Apr 2023 18:25:33 GMTCVECVE-2022-43939: Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisionshttps://agentprime.io/advisories/CVE-2022-43939/https://agentprime.io/advisories/CVE-2022-43939/CVSS 8.6 (High). Critical: In CISA’s KEV catalogue since 3 Mar 2025: it is known to be exploited. CVSS score 8.6 (7.0 or more) and EPSS 0.92 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Apr 2023 18:10:32 GMTCVEcriticalKEVCVE-2022-43938: Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')https://agentprime.io/advisories/CVE-2022-43938/https://agentprime.io/advisories/CVE-2022-43938/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.26 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Apr 2023 18:06:54 GMTCVEcriticalCVE-2022-43773: Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resourcehttps://agentprime.io/advisories/CVE-2022-43773/https://agentprime.io/advisories/CVE-2022-43773/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.22 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Apr 2023 17:59:17 GMTCVEcriticalCVE-2022-43769: Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)https://agentprime.io/advisories/CVE-2022-43769/https://agentprime.io/advisories/CVE-2022-43769/CVSS 8.8 (High). Critical: In CISA’s KEV catalogue since 3 Mar 2025: it is known to be exploited. CVSS score 8.8 (7.0 or more) and EPSS 0.98 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Apr 2023 17:47:45 GMTCVEcriticalKEVCVE-2021-45448: Pentaho Business Analytics Server - Pentaho Analyzer plugin exposes a service endpoint for templates which allows a user supplied path to access resources that are out of bounds.https://agentprime.io/advisories/CVE-2021-45448/https://agentprime.io/advisories/CVE-2021-45448/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Nov 2022 15:12:25 GMTCVECVE-2021-45447: Pentaho Business Analytics Server - With the Data Lineage feature enabled, the system transmits database passwords in clear texthttps://agentprime.io/advisories/CVE-2021-45447/https://agentprime.io/advisories/CVE-2021-45447/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Nov 2022 14:56:01 GMTCVECVE-2021-45446: Pentaho Business Analytics Server - Exposure of Information Through Directory Listinghttps://agentprime.io/advisories/CVE-2021-45446/https://agentprime.io/advisories/CVE-2021-45446/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Nov 2022 14:26:02 GMTCVE