VP
Product
Vantara Pentaho Data Integration And Analytics
6
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 3Low 0
Watch
Add Vantara Pentaho Data Integration And Analytics to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-11158 | 9.1 | Mar 9 | Hitachi Vantara Pentaho Data Integration & Analytics - Missing Authorization Affected: before 10.2.0.6 |
| CVE-2026-2253 | 7.7 | May 27 | Hitachi Vantara Pentaho Data Integration & Analytics - Improper Restriction of XML External Entity Reference Affected: before 10.2.0.7; after 10.2.0.8 before 11.0.0.0; 8.3; 9.3 |
| CVE-2025-11159 | 7.2 | May 13 | Hitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party Component Affected: before 10.2.0.7 |
| CVE-2026-2254 | 6.3 | May 27 | Hitachi Vantara Pentaho Data Integration & Analytics - Incorrect Permission Assignment for Critical Resource Affected: before 10.2.0.7; after 10.2.0.8 before 11.0.0.0; 8.3; 9.3 |
| CVE-2023-5617 | 5.3 | Feb 28 | Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat when a server error is… Affected: before 9.3.0.6; 9.4.0.0 before 10.1.0.0 |
| CVE-2026-2255 | 4.3 | May 27 | Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials Affected: before 10.2.0.7; after 10.2.0.8 before 11.0.0.0; 8.3; 9.3 |
Showing 6