Hitachi Vantara Pentaho Business Analytics Server 9.4.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:hitachi:vantara_pentaho_business_analytics_server:9.4.0.0:*:*:*:*:*:*:*
part: a version: 9.4.0.0 update: *
| Vendor | Hitachi (437a37e3-5ce7-5362-9e23-5ea2c73e6d98) |
|---|---|
| Product | Vantara Pentaho Business Analytics Server (c270ed9a-9014-5e50-86e5-d33f4f67b523) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-1158 |
vulnerable | 2026-06-08 05:52:33.999441 |
Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
MEDIUM (4.3)
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users who are not part of the authorization list.
Published: 2023-05-24T21:26:53.129Z
Updated: 2025-01-16T15:30:17.683Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4815 |
vulnerable | 2026-06-08 05:52:00.413139 |
Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data
HIGH (8)
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x deserialize untrusted JSON data without constraining the parser to approved classes and methods.
Published: 2023-05-24T21:30:37.243Z
Updated: 2025-01-16T15:29:21.796Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4771 |
vulnerable | 2026-06-08 05:52:00.343648 |
Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
MEDIUM (5.4)
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow a malicious URL to inject content into the Pentaho User Console through session variables.
Published: 2023-04-03T18:58:44.148Z
Updated: 2025-02-11T14:28:21.236Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43941 |
vulnerable | 2026-06-08 05:49:35.047118 |
Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference
HIGH (7.1)
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly protect the Post Analysis service endpoint of the data access plugin against out-of-band XML External Entity Reference.
Published: 2023-04-03T18:44:41.398Z
Updated: 2025-02-11T14:29:51.364Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43940 |
vulnerable | 2026-06-08 05:49:35.046701 |
Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
HIGH (8.8)
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly perform an authorization check in the data source management service.
Published: 2023-04-03T18:25:33.397Z
Updated: 2025-02-11T14:40:50.348Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43939 |
vulnerable | 2026-06-08 05:49:35.046171 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43938 |
vulnerable | 2026-06-08 05:49:35.045634 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43773 |
vulnerable | 2026-06-08 05:49:34.028478 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43769 |
vulnerable | 2026-06-08 05:49:34.025155 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3960 |
vulnerable | 2026-06-08 05:48:22.705190 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.