Advisories · Technology

Hitachi Vantara Pentaho Data Integration & Analytics.

Every CVE that names Hitachi Vantara Pentaho Data Integration & Analytics among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-24907 CVE record

CVSS 6.8 Medium

Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal
- Hitachi Vantara Pentaho Data Integration & Analytics
- Path traversal
Not analysed yet 16 Apr 2025
CVE-2025-24908 CVE record

CVSS 6.8 Medium

Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal
- Hitachi Vantara Pentaho Data Integration & Analytics
- Path traversal
Not analysed yet 16 Apr 2025
CVE-2025-0756 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')
- Hitachi Vantara Pentaho Data Integration & Analytics
- CWE-99
Not analysed yet 16 Apr 2025
CVE-2024-37363 CVE record

CVSS 6.5 Medium

Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
- Hitachi Vantara Pentaho Data Integration & Analytics
- Hitachi Vantara Pentaho Business Analytics Server
- Broken access control
Not analysed yet 19 Feb 2025
CVE-2024-37362 CVE record

CVSS 6.3 Medium

Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials
- Hitachi Vantara Pentaho Data Integration & Analytics
- Hitachi Vantara Pentaho Business Analytics Server
- Hard-coded credentials
Not analysed yet 19 Feb 2025
CVE-2024-6697 CVE record

CVSS 6.5 Medium

Hitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges
- Hitachi Vantara Pentaho Data Integration & Analytics
- Hitachi Vantara Pentaho Business Analytics Server
- CWE-280
Not analysed yet 19 Feb 2025
CVE-2024-6696 CVE record

CVSS 4.9 Medium

Hitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access Control
- Hitachi Vantara Pentaho Data Integration & Analytics
- Hitachi Vantara Pentaho Business Analytics Server
- CWE-1220
Not analysed yet 19 Feb 2025
CVE-2024-37361 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data
- Hitachi Vantara Pentaho Data Integration & Analytics
- Hitachi Vantara Pentaho Business Analytics Server
- Insecure deserialization
Not analysed yet 19 Feb 2025
CVE-2024-37360 CVE record

CVSS 4.4 Medium

Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Hitachi Vantara Pentaho Data Integration & Analytics
- Hitachi Vantara Pentaho Business Analytics Server
- Cross-site scripting (XSS)
Not analysed yet 19 Feb 2025
CVE-2024-37359 CVE record

CVSS 8.6 High

Hitachi Vantara Pentaho Business Analytics Server – Server Side Request Forgery
- Hitachi Vantara Pentaho Data Integration & Analytics
- Hitachi Vantara Pentaho Business Analytics Server
- Server-side request forgery (SSRF)
Not analysed yet 19 Feb 2025
CVE-2024-5705 CVE record

CVSS 8.8 High

Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
- Hitachi Vantara Pentaho Data Integration & Analytics
- Hitachi Vantara Pentaho Business Analytics Server
- Broken access control
Not analysed yet 19 Feb 2025
CVE-2024-5706 CVE record

CVSS 8.8 High

Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')
- Hitachi Vantara Pentaho Data Integration & Analytics
- Hitachi Vantara Pentaho Business Analytics Server
- CWE-99
Not analysed yet 19 Feb 2025
CVE-2024-28981 CVE record

CVSS 8.5 High

Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials
- Hitachi Vantara Pentaho Data Integration & Analytics
- Hard-coded credentials
Not analysed yet 11 Sept 2024
CVE-2023-5617 CVE record

CVSS 5.3 Medium

Hitachi Vantara Pentaho Data Integration & Analytics - Server-generated Error Message Containing Sensitive Information
- Hitachi Vantara Pentaho Data Integration & Analytics
- CWE-550
Not analysed yet 28 Feb 2024
CVE-2023-3517 CVE record

CVSS 8.5 High

Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')
- Hitachi Vantara Pentaho Data Integration & Analytics
- CWE-99
Not analysed yet 12 Dec 2023