CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2023/12/12 11:15 p.m.•10 views

CVE-2023-3517

Hitachi Vantara Pentaho Data Integration & Analytics versions before 9.5.0.1 and 9.3.0.5, including 8.3.x does not restrict JNDI identifiers during the creation of XActions, allowing control of system level data sources...

8.8CVSS5.8AI score0.00642EPSS

SaveExploits0References1

NVD•added 2023/12/12 11:15 p.m.•26 views

CVE-2023-3517

8.8CVSS0.00642EPSS

SaveExploits0References1

CVE•added 2023/12/12 10:28 p.m.•48 views

CVE-2023-3517

Hitachi Vantara Pentaho Data Integration & Analytics (Hitachi Pentaho) contains a vulnerability where versions before 9.5.0.1 and 9.3.0.5, including 8.3.x, do not restrict JNDI identifiers during the creation of XActions, allowing an attacker to influence system‑level data sources. Affected produ...

8.8CVSS8.8AI score0.00642EPSS

SaveExploits0References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2023/12/12 12:00 a.m.•0 views

CVE-2023-3517: Improper Control of Resource Identifiers

8.8CVSS7.8AI score0.00642EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by