HV
Vendor
Hitachi Vantara
15
CVEs
4
On KEV
3
New 30D
Products
RO9.1
Remot Ops Agent
Hitachi Vantara
2 CVEs0 on KEV2 new
RO9.1
Remote Ops Agent
Hitachi Vantara
1 CVEs0 on KEV1 new
PB9.8
Pentaho Business Analytics Server
Hitachi Vantara
5 CVEs2 on KEV0 new
PB9.8
Pentaho Business Analytics (BA) Server
Hitachi Vantara
2 CVEs2 on KEV0 new
PD9.1
Pentaho Data Integration and Analytics
Hitachi Vantara
5 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108337 | RO Remot Ops Agent Hitachi Vantara | 7.4 | Oct 14 | Password Reset Code Accessible in User Listing API |
| CVE-2026-108336 | RO Remot Ops Agent Hitachi Vantara | 9.1 | Oct 14 | Token Signing Key Allows Unauthenticated Administrative Access |
| CVE-2026-108335 | RO Remote Ops Agent Hitachi Vantara | 9.1 | Oct 14 | Password Reset Functionality Missing Brute-Force Protection |
| CVE-2026-2253 | PD Pentaho Data Integration and Analytics Hitachi Vantara | 7.7 | May 27 | Hitachi Vantara Pentaho Data Integration & Analytics - Improper Restriction of XML External Entity Reference |
| CVE-2026-2255 | PD Pentaho Data Integration and Analytics Hitachi Vantara | 4.3 | May 27 | Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials |
| CVE-2026-2254 | PD Pentaho Data Integration and Analytics Hitachi Vantara | 6.3 | May 27 | Hitachi Vantara Pentaho Data Integration & Analytics - Incorrect Permission Assignment for Critical Resource |
| CVE-2025-11159 | PD Pentaho Data Integration and Analytics Hitachi Vantara | 7.2 | May 13 | Hitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party Component |
| CVE-2025-11158 | PD Pentaho Data Integration and Analytics Hitachi Vantara | 9.1 | Mar 9 | Hitachi Vantara Pentaho Data Integration & Analytics - Missing Authorization |
| CVE-2022-43939 In wildKEV | PB Pentaho Business Analytics Server Hitachi Vantara | 9.8 | Apr 3 | Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions |
| CVE-2022-43769 In wildKEV | PB Pentaho Business Analytics Server Hitachi Vantara | 7.2 | Apr 3 | Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) |
| CVE-2021-45448 | PB Pentaho Business Analytics Server Hitachi Vantara | 6.5 | Nov 2 | Pentaho Business Analytics Server - Pentaho Analyzer plugin exposes a service endpoint for templates which allows a user supplied path to access resources that are out of bounds. |
| CVE-2021-45447 | PB Pentaho Business Analytics Server Hitachi Vantara | 7.5 | Nov 2 | Pentaho Business Analytics Server - With the Data Lineage feature enabled, the system transmits database passwords in clear text |
| CVE-2021-45446 | PB Pentaho Business Analytics Server Hitachi Vantara | 7.5 | Nov 2 | Pentaho Business Analytics Server - Exposure of Information Through Directory Listing |