CVE-2020-24670

The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'type' attribute of 'dashboardXml' parameter...

CVE-2020-24670

CVE-2020-24670 concerns the Dashboard Editor in Hitachi Vantara Pentaho (7.x–8.x). The vulnerability is a reflected Cross-site Scripting flaw in the dashboardXml parameter’s type attribute, exploitable by an authenticated remote user to execute arbitrary JavaScript. The issue is mitigated by upda...

CVE-2020-24669

The New Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a DOM-based Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'Analysis Report Description' field in 'About...

CVE-2020-24669

The CVE-2020-24669 issue affects Hitachi Vantara Pentaho (New Analysis Report). A DOM-based XSS flaw resides in the Analysis Report Description field under About This Report, exploitable by an authenticated remote user to run arbitrary JavaScript. Remediation is available in Pentaho GA versions 8...

CVE-2020-24665

The CVE-2020-24665 issue affects Hitachi Vantara Pentaho Dashboard Editor in the 7.x–8.x line. It is an XML Entity Expansion (XXE) injection via the dashboardXml parameter that enables an authenticated remote user to trigger a denial of service (DoS) . The root cause is the processing of external...

CVE-2020-24665

The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains an XML Entity Expansion injection vulnerability, which allows an authenticated remote users to trigger a denial of service DoS condition. Specifically, the vulnerability lies in the 'dashboardXml' parameter. Remediated in ...

CVE-2020-24666: Improper Neutralization of Input During Web Page Generation

The Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a stored Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'Display Name' parameter. Remediated in = 9.1.0.1...

CVE-2020-24664: Improper Neutralization of Input During Web Page Generation

The dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'pho:title' attribute of 'dashboardXml' parameter...

PT-2021-11062

Name of the Vulnerable Software and Affected Versions: Hitachi Vantara Pentaho versions 7.x through 8.x Description: The Dashboard Editor in Hitachi Vantara Pentaho contains a reflected Cross-site scripting issue, allowing authenticated remote users to execute arbitrary JavaScript code. The...

PT-2021-11061

Name of the Vulnerable Software and Affected Versions: Hitachi Vantara Pentaho versions 7.x through 8.x Description: The issue is a DOM-based Cross-site scripting vulnerability that allows authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the...

PT-2021-11056

Name of the Vulnerable Software and Affected Versions: Hitachi Vantara Pentaho versions 7.x through 8.x Description: The dashboard Editor in Hitachi Vantara Pentaho contains a reflected Cross-site scripting issue, allowing authenticated remote users to execute arbitrary JavaScript code. The...

PT-2021-11057

Name of the Vulnerable Software and Affected Versions: Hitachi Vantara Pentaho versions 7.x through 8.x before 7.1.0.25 Hitachi Vantara Pentaho versions 8.x before 8.2.0.6 Hitachi Vantara Pentaho versions 8.3.0.0 before GA Description: The Dashboard Editor in Hitachi Vantara Pentaho contains an X...

Hitachi Vantara Pentaho 跨站脚本漏洞

Pentaho is a Business Intelligence BI software that provides data integration, OLAP services, reporting, information dashboards, data mining, and Extract, Transform, Load ETL capabilities. A reflected cross-site scripting vulnerability exists in the 'pho:title' attribute of the 'dashboardXml'...

Hitachi Vantara Pentaho 跨站脚本漏洞

Pentaho is a Business Intelligence BI software that provides data integration, OLAP services, reporting, information dashboards, data mining, and Extract, Transform, Load ETL capabilities. A DOM-type cross-site scripting vulnerability exists in Hitachi Vantara Pentaho in the Analysis Report...

Hitachi Vantara Pentaho 跨站脚本漏洞

Pentaho is a Business Intelligence BI software that provides data integration, OLAP services, reporting, information dashboards, data mining, and Extract, Transform, Load ETL capabilities. A stored cross-site scripting vulnerability exists in the Display Name parameter of the Analysis Report in...

CVE-2020-24665: Improper Restriction of Recursive Entity References in DTDs

The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains an XML Entity Expansion injection vulnerability, which allows an authenticated remote users to trigger a denial of service DoS condition. Specifically, the vulnerability lies in the 'dashboardXml' parameter. Remediated in ...

CVE-2020-24670: Improper Neutralization of Input During Web Page Generation

The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'type' attribute of 'dashboardXml' parameter...

PT-2021-11058

Name of the Vulnerable Software and Affected Versions: Hitachi Vantara Pentaho versions 7.x through 8.x Description: The Analysis Report in Hitachi Vantara Pentaho contains a stored Cross-site scripting issue, allowing authenticated remote users to execute arbitrary JavaScript code. The...

CVE-2020-24669: Improper Neutralization of Input During Web Page Generation

The New Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a DOM-based Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'Analysis Report Description' field in 'About...

Hitachi Vantara Pentaho Business Analytics Platform Cross-Site Request Forgery Vulnerability

Hitachi Vantara Pentaho Business Analytics BA Platform is an open source Business Intelligence BI system from Hitachi Vantara Japan that provides data integration, OLAP services, reporting, dashboards, data mining, and ETL capabilities. A cross-site request forgery vulnerability exists in Hitachi...