VendorsHitachivantara_pentaho_business_analytics_server9.4.0.0
Vulnerabilities

Hitachi Vantara Pentaho Business Analytics Server 9.4.0.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2022-43939
Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions
Published 2023-04-03 · Analyzed
9.8KEV1 PoCEPSS 0.923
CVE-2022-43769
Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
Published 2023-04-03 · Analyzed
8.8KEV1 PoCEPSS 0.977
CVE-2022-43938
Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
Published 2023-04-03 · Modified
8.8EPSS 0.264
CVE-2022-43773
Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource
Published 2023-04-03 · Modified
8.8EPSS 0.222
CVE-2022-4815
Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data
Published 2023-05-24 · Modified
8.8EPSS 0.006
CVE-2022-43940
Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
Published 2023-04-03 · Modified
8.8EPSS 0.006
CVE-2022-43941
Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference
Published 2023-04-03 · Modified
7.1EPSS 0.005
CVE-2022-3960
Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
Published 2023-04-03 · Modified
6.3EPSS 0.005
CVE-2022-4771
Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published 2023-04-03 · Modified
6.1EPSS 0.004
CVE-2023-1158
Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
Published 2023-05-24 · Modified
4.3EPSS 0.004