Vantara Pentaho Business Analytics Server
Approved changes feed: RSS · Atom
cpe:2.3:a:hitachi:vantara_pentaho_business_analytics_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hitachi (437a37e3-5ce7-5362-9e23-5ea2c73e6d98) |
|---|---|
| Product | Vantara Pentaho Business Analytics Server (c270ed9a-9014-5e50-86e5-d33f4f67b523) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-1158 |
vulnerable | 2026-06-08 05:52:33.998569 |
Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
MEDIUM (4.3)
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users who are not part of the authorization list.
Published: 2023-05-24T21:26:53.129Z
Updated: 2025-01-16T15:30:17.683Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4815 |
vulnerable | 2026-06-08 05:52:00.413033 |
Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data
HIGH (8)
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x deserialize untrusted JSON data without constraining the parser to approved classes and methods.
Published: 2023-05-24T21:30:37.243Z
Updated: 2025-01-16T15:29:21.796Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4771 |
vulnerable | 2026-06-08 05:52:00.341808 |
Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
MEDIUM (5.4)
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow a malicious URL to inject content into the Pentaho User Console through session variables.
Published: 2023-04-03T18:58:44.148Z
Updated: 2025-02-11T14:28:21.236Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4770 |
vulnerable | 2026-06-08 05:52:00.341220 |
Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information
MEDIUM (4.3)
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the full parametrized SQL query in an error message when an invalid character is used within a Pentaho Report (*.prpt).
Published: 2023-04-03T18:56:17.800Z
Updated: 2025-02-11T14:28:35.632Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4769 |
vulnerable | 2026-06-08 05:52:00.340543 |
Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information
MEDIUM (4.3)
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the target path on host when a file is uploaded with an invalid character in its name.
Published: 2023-04-03T18:53:51.840Z
Updated: 2025-02-11T14:28:52.915Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43941 |
vulnerable | 2026-06-08 05:49:35.047097 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43940 |
vulnerable | 2026-06-08 05:49:35.046675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43939 |
vulnerable | 2026-06-08 05:49:35.046145 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43938 |
vulnerable | 2026-06-08 05:49:35.045435 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43773 |
vulnerable | 2026-06-08 05:49:34.028454 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43772 |
vulnerable | 2026-06-08 05:49:34.027930 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43771 |
vulnerable | 2026-06-08 05:49:34.027424 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43769 |
vulnerable | 2026-06-08 05:49:34.024273 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3960 |
vulnerable | 2026-06-08 05:48:22.704357 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.