Hitachi Vantara vulnerabilities
56 CVEs and advisories name Hitachi Vantara as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-108337Password Reset Code Accessible in User Listing API
- CVE-2026-108336Token Signing Key Allows Unauthenticated Administrative Access
- CVE-2026-108335Password Reset Functionality Missing Brute-Force Protection
- CVE-2026-2253Hitachi Vantara Pentaho Data Integration & Analytics - Improper Restriction of XML External Entity Reference
- CVE-2026-2255Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials
- CVE-2026-2254Hitachi Vantara Pentaho Data Integration & Analytics - Incorrect Permission Assignment for Critical Resource
- CVE-2025-11159Hitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party Component
- CVE-2025-11158Hitachi Vantara Pentaho Data Integration & Analytics - Missing Authorization
- CVE-2025-9121Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data
- CVE-2025-9122Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information
- CVE-2025-24907Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal
- CVE-2025-24911Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference
- CVE-2025-24910Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference
- CVE-2025-24909Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- CVE-2025-24908Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal
- CVE-2025-0756Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')
- CVE-2025-0757Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- CVE-2025-0758Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource
- CVE-2024-37363Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
- CVE-2024-37362Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials
- CVE-2024-6697Hitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges
- CVE-2024-6696Hitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access Control
- CVE-2024-37361Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data
- CVE-2024-37360Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- CVE-2024-37359Hitachi Vantara Pentaho Business Analytics Server – Server Side Request Forgery
- CVE-2024-5705Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
- CVE-2024-5706Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')
- CVE-2024-28981Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials
- CVE-2024-28984Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- CVE-2024-28983Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')