Hitachi Vantara vulnerabilities
56 CVEs and advisories name Hitachi Vantara as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-28982Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference
- CVE-2023-5617Hitachi Vantara Pentaho Data Integration & Analytics - Server-generated Error Message Containing Sensitive Information
- CVE-2023-3517Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')
- CVE-2023-6538System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products is susceptible to unintended information disclosure via unprivileged access to SMU configuration backup data.
- CVE-2023-5808System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products are susceptible to unintended information disclosure via unprivileged access to HNAS configuration backup and diagnostic data.
- CVE-2023-2358Hitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Format
- CVE-2022-4815Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data
- CVE-2023-1158Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
- CVE-2022-43770Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
- CVE-2022-3695Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation
- CVE-2022-4771Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- CVE-2022-4770Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information
- CVE-2022-4769Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information
- CVE-2022-43772Hitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log File
- CVE-2022-3960Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
- CVE-2022-43941Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference
- CVE-2022-43771Hitachi Vantara Pentaho Business Analytics Server - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CVE-2022-43940Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
- CVE-2022-43939Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions
- CVE-2022-43938Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
- CVE-2022-43773Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource
- CVE-2022-43769Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
- CVE-2021-45448Pentaho Business Analytics Server - Pentaho Analyzer plugin exposes a service endpoint for templates which allows a user supplied path to access resources that are out of bounds.
- CVE-2021-45447 Pentaho Business Analytics Server - With the Data Lineage feature enabled, the system transmits database passwords in clear text
- CVE-2021-45446 Pentaho Business Analytics Server - Exposure of Information Through Directory Listing
- CVE-2021-28052Hitachi Content Platform Information Disclosure Vulnerability