CVE-2025-24909

creationtimestamp| type| source ---|---|--- 2025-04-16 22:57:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12161 2025-04-17 02:06:23+00:00| seen| https://t.me/cvedetector/23189 2025-04-17 02:48:33+00:00| seen|...

CVE-2025-24909

The CVE-2025-24909 issue affects Hitachi Vantara Pentaho Business Analytics Server prior to 10.2.0.2, including 9.3.x and 8.3.x. It arises from improper neutralization of user input in the Analyzer plugin interface, allowing a malicious URL to inject content into a web page served to other users ...

CVE-2025-24909 Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Overview The software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users. CWE-79 Description Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x...