Lucene search
+L

4 matches found

OSV
OSV
added 2023/04/03 7:15 p.m.7 views

CVE-2022-4771

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow a malicious URL to inject content into the Pentaho User Console through session variables...

6.1CVSS5.8AI score0.00353EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/04/03 6:58 p.m.9 views

CVE-2022-4771 Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow a malicious URL to inject content into the Pentaho User Console through session variables...

5.4CVSS5.7AI score0.00353EPSS
Exploits0References1
CVE
CVE
added 2023/04/03 6:58 p.m.73 views

CVE-2022-4771

CVE-2022-4771 affects Hitachi Vantara Pentaho Business Analytics Server. The root cause is improper neutralization of input during web page generation, enabling cross-site scripting via session variables injected through a malicious URL. Affected versions are prior to 9.4.0.1 and 9.3.0.2, includi...

6.1CVSS5.8AI score0.00353EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/04/03 6:58 p.m.41 views

CVE-2022-4771 Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow a malicious URL to inject content into the Pentaho User Console through session variables...

5.4CVSS6.5AI score0.00353EPSS
Exploits0References1
Rows per page
Query Builder