424 matches found
Cross site scripting
The dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'pho:title' attribute of 'dashboardXml' parameter...
Cross site scripting
The Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a stored Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'Display Name' parameter. Remediated in = 9.1.0.1...
Sql injection
The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains an XML Entity Expansion injection vulnerability, which allows an authenticated remote users to trigger a denial of service DoS condition. Specifically, the vulnerability lies in the 'dashboardXml' parameter. Remediated in ...
Cross site scripting
The New Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a DOM-based Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'Analysis Report Description' field in 'About...
Cross site scripting
The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'type' attribute of 'dashboardXml' parameter...
CVE-2020-24666
The Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a stored Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'Display Name' parameter. Remediated in = 9.1.0.1...
CVE-2020-24666
Hitachi Vantara Pentaho Analysis Report (versions 7.x–8.x) contains a stored cross-site scripting (XSS) vulnerability in the Display Name parameter of the Analysis Report. An authenticated remote user can inject and execute arbitrary JavaScript in affected environments. Impact is defined as authe...
CVE-2020-24664
The dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'pho:title' attribute of 'dashboardXml' parameter...
CVE-2020-24664
The CVE-2020-24664 issue affects Hitachi Vantara Pentaho Dashboard Editor (Pentaho) versions through 7.x–8.x. A reflected cross-site scripting vulnerability exists in the dashboardXml parameter’s pho:title attribute, exploitable by authenticated remote users to execute arbitrary JavaScript. Remed...
CVE-2020-24670
The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'type' attribute of 'dashboardXml' parameter...
CVE-2020-24670
CVE-2020-24670 concerns the Dashboard Editor in Hitachi Vantara Pentaho (7.x–8.x). The vulnerability is a reflected Cross-site Scripting flaw in the dashboardXml parameter’s type attribute, exploitable by an authenticated remote user to execute arbitrary JavaScript. The issue is mitigated by upda...
CVE-2020-24669
The CVE-2020-24669 issue affects Hitachi Vantara Pentaho (New Analysis Report). A DOM-based XSS flaw resides in the Analysis Report Description field under About This Report, exploitable by an authenticated remote user to run arbitrary JavaScript. Remediation is available in Pentaho GA versions 8...
CVE-2020-24669
The New Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a DOM-based Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'Analysis Report Description' field in 'About...
CVE-2020-24665
The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains an XML Entity Expansion injection vulnerability, which allows an authenticated remote users to trigger a denial of service DoS condition. Specifically, the vulnerability lies in the 'dashboardXml' parameter. Remediated in ...
CVE-2020-24665
The CVE-2020-24665 issue affects Hitachi Vantara Pentaho Dashboard Editor in the 7.x–8.x line. It is an XML Entity Expansion (XXE) injection via the dashboardXml parameter that enables an authenticated remote user to trigger a denial of service (DoS) . The root cause is the processing of external...
Hitachi Vantara Pentaho 跨站脚本漏洞
Pentaho is a Business Intelligence BI software that provides data integration, OLAP services, reporting, information dashboards, data mining, and Extract, Transform, Load ETL capabilities. A DOM-type cross-site scripting vulnerability exists in Hitachi Vantara Pentaho in the Analysis Report...
Hitachi Vantara Pentaho 跨站脚本漏洞
Pentaho is a Business Intelligence BI software that provides data integration, OLAP services, reporting, information dashboards, data mining, and Extract, Transform, Load ETL capabilities. A stored cross-site scripting vulnerability exists in the Display Name parameter of the Analysis Report in...
Hitachi Vantara Pentaho 跨站脚本漏洞
Pentaho is a Business Intelligence BI software that provides data integration, OLAP services, reporting, information dashboards, data mining, and Extract, Transform, Load ETL capabilities. A reflected cross-site scripting vulnerability exists in the 'pho:title' attribute of the 'dashboardXml'...
Hitachi Vantara Pentaho Business Analytics Platform Cross-Site Request Forgery Vulnerability
Hitachi Vantara Pentaho Business Analytics BA Platform is an open source Business Intelligence BI system from Hitachi Vantara Japan that provides data integration, OLAP services, reporting, dashboards, data mining, and ETL capabilities. A cross-site request forgery vulnerability exists in Hitachi...
