Lucene search
HistoryApr 11, 2023 - 4:15 p.m.
CVE-2022-3695
cve-2022-3695
hitachi vantara
pentaho business analytics
dashboard
cde plugin
security vulnerability
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
18.5%
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.3.0.0, 9.2.0.4 and 8.3.0.27 allow a malicious URL to inject content into a dashboard when the CDE plugin is present.
Affected configurations
Node
hitachivantarapentaho_business_analyticsRange<8.3.0.27
ORhitachivantarapentaho_business_analyticsRange9.2.0.0–9.2.0.4
Related
prion
prion
Design/Logic Flaw
2023-04-11 16:15:00
cvelist
cvelist
cve
cve
CVE-2022-3695
2023-04-11 16:15:07
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
18.5%
Related for NVD:CVE-2022-3695