Log in Start free

Hitachi Vantara

Products

ProductCVEsExploitedLatest
Pentaho Business Analytics Server372Apr 16, 2025
Pentaho Data Integration & Analytics15–Apr 16, 2025
Pentaho Data Integration and Analytics7–May 27, 2026
Remot Ops Agent2–Oct 14, 2026
System Management Unit (SMU)2–Dec 11, 2023
Hitachi Content Platform1–Sep 26, 2022
Remote Ops Agent1–Oct 14, 2026

Exploited and recent CVEs

  • CVE-2022-43939 High 8.6 Exploited Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions 92.3%
  • CVE-2022-43769 High 8.8 Exploited Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) 97.7%
  • CVE-2026-108337 High 7.4 Password Reset Code Accessible in User Listing API 0.3%
  • CVE-2026-108336 Critical 9.1 Token Signing Key Allows Unauthenticated Administrative Access 0.2%
  • CVE-2026-108335 Critical 9.1 Password Reset Functionality Missing Brute-Force Protection 0.2%
  • CVE-2026-2253 High 7.7 Hitachi Vantara Pentaho Data Integration & Analytics - Improper Restriction of XML External Entity Reference 0.2%
  • CVE-2026-2255 Medium 4.3 Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials 0.2%
  • CVE-2026-2254 Medium 6.3 Hitachi Vantara Pentaho Data Integration & Analytics - Incorrect Permission Assignment for Critical Resource 0.2%
  • CVE-2025-11159 Critical 9.1 Hitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party Component 0.3%
  • CVE-2025-11158 Critical 9.1 Hitachi Vantara Pentaho Data Integration & Analytics - Missing Authorization 0.4%
  • CVE-2025-9121 High 8.8 Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data 0.4%
  • CVE-2025-9122 Medium 5.3 Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information 0.3%
  • CVE-2025-24907 Medium 6.8 Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal 0.4%
  • CVE-2025-24911 Medium 4.9 Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference 0.4%
  • CVE-2025-24910 Medium 4.9 Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference 0.4%
  • CVE-2025-24909 Medium 4.4 Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 0.3%
  • CVE-2025-24908 Medium 6.8 Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal 0.5%
  • CVE-2025-0756 Critical 9.1 Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection') 1.0%
  • CVE-2025-0757 Medium 4.4 Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 0.3%
  • CVE-2025-0758 Medium 6.1 Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource 0.1%
  • CVE-2024-37363 Medium 6.5 Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization 0.3%
  • CVE-2024-37363 Medium 6.5 Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization 0.3%
  • CVE-2024-37362 Medium 6.3 Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials 0.3%
  • CVE-2024-37362 Medium 6.3 Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials 0.3%
  • CVE-2024-6697 Medium 6.5 Hitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges 0.3%
  • CVE-2024-6697 Medium 6.5 Hitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges 0.3%
  • CVE-2024-6696 Medium 4.9 Hitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access Control 0.4%
  • CVE-2024-6696 Medium 4.9 Hitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access Control 0.4%
  • CVE-2024-37361 Critical 9.9 Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data 0.5%
  • CVE-2024-37361 Critical 9.9 Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data 0.5%