Pentaho Business Analytics Server Security Vulnerabilities and Issues — Pentaho Business Analytics Server CVE List

Lucene search

HitachiPentaho Business Analytics Server

3 matches found

CVE•added 2024/06/26 11:15 p.m.•40 views

CVE-2024-28982

Hitachi Vantara Pentaho Business Analytics Server versions before 10.1.0.0 and 9.3.0.7, including 8.3.x do not correctly protect the ACL service endpoint of the Pentaho User Console against XML External Entity Reference.

8.2CVSS7.2AI score0.00124EPSS

CVE•added 2024/06/26 11:15 p.m.•39 views

CVE-2024-28983

Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content into the Analyzer plugin interface.

8.8CVSS7.3AI score0.00196EPSS

CVE•added 2024/06/26 11:15 p.m.•39 views

CVE-2024-28984

Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content into the Analyzer plugin interface.

8.8CVSS7.3AI score0.00196EPSS