Login Request a demo
PB
Product
Pentaho Business Analytics Server
by Hitachi Vantara · last CVE Apr 3, 2023
On CISA KEVExploited in the wild
5
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 3Medium 1Low 0
Severity
All severities5Critical1High3Medium1Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Pentaho Business Analytics Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-43939
In wildKEV
9.8
92%
Apr 3
Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions
Affected: 1.0 before 9.3.0.2; 9.4.0.0 before 9.4.0.1
CVE-2022-43769
In wildKEV
7.2
98%
Apr 3
Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
Affected: 1.0 before 9.3.0.2; 9.4.0.0 before 9.4.0.1
Showing 2