Advisories · Technology
Hitachi Vantara Pentaho Data Integration and Analytics.
Every CVE that names Hitachi Vantara Pentaho Data Integration and Analytics among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
Hitachi Vantara Pentaho Data Integration & Analytics - Improper Restriction of XML External Entity Reference
- Hitachi Vantara Pentaho Data Integration and Analytics
- XML external entities (XXE)
- CVSS 4.3 Medium
Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials
- Hitachi Vantara Pentaho Data Integration and Analytics
- Hard-coded credentials
- CVSS 6.3 Medium
Hitachi Vantara Pentaho Data Integration & Analytics - Incorrect Permission Assignment for Critical Resource
- Hitachi Vantara Pentaho Data Integration and Analytics
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Hitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party Component
- Hitachi Vantara Pentaho Data Integration and Analytics
- CWE-1395
- CVSS 9.1 CriticalCritical · CVSS 9+
Hitachi Vantara Pentaho Data Integration & Analytics - Missing Authorization
- Hitachi Vantara Pentaho Data Integration and Analytics
- Broken access control
- CVSS 8.8 High
Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data
- Hitachi Vantara Pentaho Data Integration and Analytics
- Insecure deserialization
- CVSS 5.3 Medium
Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information
- Hitachi Vantara Pentaho Data Integration and Analytics
- Information disclosure