Hitachi
Hitachi Vantara Pentaho: vulnerabilidades y CVE
Hitachi Vantara Pentaho tiene 16 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE16
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-1158 | Media (4.3) | 0.38% | — | 24 may 2023 | Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users who are not part of the authorization list. |
| CVE-2022-4815 | Alta (8.8) | 0.63% | — | 24 may 2023 | Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x deserialize untrusted JSON data without constraining the parser to approved classes and methods. |
| CVE-2021-45448 | Media (6.5) | 0.59% | — | 2 nov 2022 | Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 using the Pentaho Analyzer plugin exposes a service endpoint for templates which allows a user-supplied path to access resources that are out of… |
| CVE-2021-45447 | Alta (7.5) | 0.32% | — | 2 nov 2022 | Hitachi Vantara Pentaho Business Analytics Server versions before 9.3.0.0, 9.2.0.2 and 8.3.0.25 with the Data Lineage feature enabled transmits database passwords in clear text. The transmission of sensitive data in… |
| CVE-2021-45446 | Alta (7.5) | 0.44% | — | 2 nov 2022 | A vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden property to the children of the Home folder. This directory listing provides an… |
| CVE-2021-34685 | Alta (7.2) | 2.3% | — | 8 nov 2021 | UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, which allows an authenticated user to upload various files of different file types. Specifically, a… |
| CVE-2021-34684 | Crítica (9.8) | 5.9% | — | 8 nov 2021 | Hitachi Vantara Pentaho Business Analytics through 9.1 allows an unauthenticated user to execute arbitrary SQL queries on any Pentaho data source and thus retrieve data from the related databases, as demonstrated by an… |
| CVE-2021-31602 | Alta (7.5) | 52% | — | 8 nov 2021 | An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The Security Model has different layers of Access Control. One of these layers is the… |
| CVE-2021-31601 | Media (6.5) | 1.4% | — | 8 nov 2021 | An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. They implement a series of web services using the SOAP protocol to allow scripting interaction with… |
| CVE-2021-31600 | Media (4.3) | 0.98% | — | 8 nov 2021 | An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. They implement a series of web services using the SOAP protocol to allow scripting interaction with… |
| CVE-2021-31599 | Alta (8.8) | 2.3% | — | 8 nov 2021 | An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. A reports (.prpt) file allows the inclusion of BeanShell scripts to ease the production of complex… |
| CVE-2020-24670 | Media (5.4) | 0.62% | — | 29 ene 2021 | The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically,… |
| CVE-2020-24669 | Media (5.4) | 0.62% | — | 29 ene 2021 | The New Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a DOM-based Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code.… |
| CVE-2020-24666 | Media (5.4) | 0.62% | — | 29 ene 2021 | The Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a stored Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the… |
| CVE-2020-24665 | Media (6.5) | 1.1% | — | 29 ene 2021 | The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains an XML Entity Expansion injection vulnerability, which allows an authenticated remote users to trigger a denial of service (DoS) condition.… |
| CVE-2020-24664 | Media (5.4) | 0.62% | — | 29 ene 2021 | The dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically,… |
Otros productos de Hitachi
Device Manager · 18OPS Center Analyzer · 17Vantara Pentaho Business Analytics Server · 14Ucosminexus Service Platform · 13Infrastructure Analytics Advisor · 13Tuning Manager · 10Ucosminexus Application Server Enterprise · 9Ucosminexus Application Server Standard · 9Groupmax Collaboration Portal · 8Ucosminexus Service Architect · 8Replication Manager · 7Groupmax Collaboration WEB Client · 7