Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability

🗓️ 03 Mar 2025 00:00:00Reported by CISAType

cisa_kev

cisa_kev🔗 www.cisa.gov👁 22 Views

Hitachi Vantara Pentaho BA Server has a vulnerability for special element injection enabling command execution.

Reporter	Title	Published	Views	Family All 25
0day.today	Pentaho BA Server EE 9.3.0.0-428 Server-Side Template Injection / Remote Code Execution	5 Apr 202300:00	–	zdt
ATTACKERKB	CVE-2022-43769	3 Apr 202300:00	–	attackerkb
ATTACKERKB	CVE-2022-43939	3 Apr 202300:00	–	attackerkb
BDU FSTEC	The vulnerability of Hitachi Vantara Pentaho Business Analytics Server’s server lies in the improper elimination of certain elements in the output data, allowing attackers to execute arbitrary commands.	4 Apr 202300:00	–	bdu_fstec
Circl	CVE-2022-43769	3 Apr 202322:25	–	circl
CISA	CISA Adds Five Known Exploited Vulnerabilities to Catalog	3 Mar 202512:00	–	cisa
CNNVD	Hitachi Vantara Pentaho Business Analytics Server 代码注入漏洞	3 Apr 202300:00	–	cnnvd
CVE	CVE-2022-43769	3 Apr 202317:47	–	cve
Cvelist	CVE-2022-43769 Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)	3 Apr 202317:47	–	cvelist
Exploit DB	Pentaho BA Server EE 9.3.0.0-428 - Remote Code Execution (RCE) (Unauthenticated)	8 Apr 202300:00	–	exploitdb

03 Mar 2025 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.2 - 8.8

EPSS0.9767

SSVC

special element injection hitachi vantara pentaho ba server arbitrary command execution