CVE-2023-1158

>= 9.3.0.0 and <= 9.3.0.3

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to

4.3MEDIUM

CVE-2022-4815

>= 9.3.0.0 and <= 9.3.0.3

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x deserialize untrusted JSON

8.0HIGH

CVE-2022-4771

< 9.3.0.2

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow a malicious URL to

5.4MEDIUM

CVE-2022-4770

< 9.3.0.2

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the full parametr

4.3MEDIUM

CVE-2022-4769

< 9.3.0.2

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the target path o

4.3MEDIUM

CVE-2022-43941

< 9.3.0.2

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly protect th

7.1HIGH

CVE-2022-43940

< 9.3.0.2

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly perform an

8.8HIGH

CVE-2022-43939

< 9.3.0.2

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictio

8.6HIGH

CVE-2022-43938

< 9.3.0.2

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system adm

8.8HIGH

CVE-2022-43772

< 9.3.0.1

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x with the Big Data Plugin ex

3.8LOW

CVE-2022-43771

< 9.3.0.1

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x, using the Pentaho Data Acc

6.5MEDIUM

CVE-2022-3960

< 9.3.0.2

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system adm

6.3MEDIUM

CVE-2022-43773

>= 8.3.0.0 and < 9.3.0.2

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x is installed with a sampl

8.8HIGH

CVE-2022-43769

>= 8.3.0.0 and < 9.3.0.2

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web service

8.8HIGH