2 matches found
CVE-2023-3517
Hitachi Vantara Pentaho Data Integration & Analytics versions before 9.5.0.1 and 9.3.0.5, including 8.3.x does not restrict JNDI identifiers during the creation of XActions, allowing control of system level data sources...
8.8CVSS5.8AI score0.00642EPSS
SaveExploits0References1
Hitachi Vantara Pentaho Data Integration & Analytics Security Breach
Hitachi Vantara Pentaho Data Integration & Analytics is a data integration and analytics system from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi Vantara Pentaho Data Integration & Analytics versions prior to 9.5.0.1, prior to 9.3.0.5, and 8.3.x, which stems from an...
8.8CVSS7AI score0.00642EPSS
SaveExploits0References2
20