Login Request a demo
VP
Product
Vantara Pentaho
by Hitachi · last CVE May 24, 2023
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 1High 6Medium 9Low 0
Severity
All severities16Critical1High6Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Vantara Pentaho to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-45448
6.5
1%
Nov 2
Pentaho Business Analytics Server - Pentaho Analyzer plugin exposes a service endpoint for templates which allows a user supplied path to access resources that are out of bounds.
Affected: 8.3.0.0 before 8.3.0.25; 9.2.0.0 before 9.2.0.2
CVE-2021-31601
6.5
1%
Nov 8
An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x
Affected: through 9.1.0.0
CVE-2020-24665
6.5
1%
Jan 29
The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains an XML Entity Expansion injection vulnerability, which allows an authenticated remote users to trigger a…
Affected: 7.0.0 before 7.1.0.25; 8.0.0 before 8.2.0.6
CVE-2020-24670
5.4
1%
Jan 29
The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute…
Affected: 7.0.0 before 7.1.0.25; 8.0.0 before 8.2.0.6
CVE-2020-24669
5.4
1%
Jan 29
The New Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a DOM-based Cross-site scripting vulnerability, which allows an authenticated remote users to execute…
Affected: 7.0.0 before 8.3.0.9; 9.0.0 before 9.0.0.1
CVE-2020-24666
5.4
1%
Jan 29
The Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a stored Cross-site scripting vulnerability, which allows an authenticated remote users to execute…
Affected: 7.0.0 before 9.1.0.1
CVE-2020-24664
5.4
1%
Jan 29
The dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute…
Affected: 7.0.0 before 7.1.0.25; 8.0.0 before 8.2.0.6
CVE-2023-1158
4.3
0%
May 24
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users who are not part of the authorization list
Affected: 8.3.0.0 through 8.3.0.25
CVE-2021-31600
4.3
1%
Nov 8
An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x
Affected: through 9.1.0.0
Showing 9