Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Critical9.1Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6, including 9.3.x and 8.3.x, do not restrict Groovy scripts in new PRPT reports published…CVE-2025-11158 · hitachi · vantara pentaho data integration and analytics · CVE.org · NIST NVD · PentahoMar 10, 2026
Critical9.8Hitachi Vantara Pentaho BA Server Authorization Bypass VulnerabilityCVE-2022-43939 · hitachi · vantara pentaho business analytics server · CISA KEV · CVE.org · FIRST EPSS · PentahoKEVEPSS 92.3%Apr 3, 2023
High7.2Hitachi Vantara Pentaho BA Server Special Element Injection VulnerabilityCVE-2022-43769 · hitachi · vantara pentaho business analytics server · CISA KEV · CVE.org · FIRST EPSS · PentahoKEVEPSS 97.7%Apr 3, 2023