CVE-2025-0757

Overview The software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users. CWE-79 Description Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x...

CVE-2025-0757

creationtimestamp| type| source ---|---|--- 2025-04-16 22:57:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12165 2025-04-17 02:06:37+00:00| seen| https://t.me/cvedetector/23200 2025-04-17 02:48:30+00:00| seen|...

CVE-2025-0757

CVE-2025-0757 affects Hitachi Vantara Pentaho Business Analytics Server (versions prior to 10.2.0.2, including 9.3.x and 8.3.x). The issue is improper neutralization of user-controllable input before it is output to web pages, enabling cross-site scripting via a malicious URL in the Analyzer plug...