VendorsHitachivantara_pentaho_business_analytics_serverany version
Vulnerabilities

Hitachi Vantara Pentaho Business Analytics Server any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

14CVEs
CVE-2022-43939
Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions
Published 2023-04-03 · Analyzed
9.8KEV1 PoCEPSS 0.923
CVE-2022-43769
Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
Published 2023-04-03 · Analyzed
8.8KEV1 PoCEPSS 0.977
CVE-2022-43938
Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
Published 2023-04-03 · Modified
8.8EPSS 0.264
CVE-2022-43773
Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource
Published 2023-04-03 · Modified
8.8EPSS 0.222
CVE-2022-4815
Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data
Published 2023-05-24 · Modified
8.8EPSS 0.006
CVE-2022-43940
Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
Published 2023-04-03 · Modified
8.8EPSS 0.006
CVE-2022-43941
Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference
Published 2023-04-03 · Modified
7.1EPSS 0.005
CVE-2022-43771
Hitachi Vantara Pentaho Business Analytics Server - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published 2023-04-03 · Modified
6.5EPSS 0.239
CVE-2022-43772
Hitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log File
Published 2023-04-03 · Modified
6.5EPSS 0.004
CVE-2022-3960
Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
Published 2023-04-03 · Modified
6.3EPSS 0.005
CVE-2022-4771
Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published 2023-04-03 · Modified
6.1EPSS 0.004
CVE-2022-4769
Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information
Published 2023-04-03 · Modified
4.3EPSS 0.004
CVE-2022-4770
Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information
Published 2023-04-03 · Modified
4.3EPSS 0.004
CVE-2023-1158
Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
Published 2023-05-24 · Modified
4.3EPSS 0.004