CVE-2025-9122: falha de média gravidade em Hitachi Vantara Pentaho Data Integration and…
Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.3%
Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Hitachi Vantara · Pentaho Data Integration and AnalyticsCVEs relacionadas — Hitachi Vantara Pentaho Data Integration and…
No mesmo produto, das mais perigosas para as menos.
CVE-2025-9121HIGHHitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted DataEPSS 0.4%CVE-2025-11158CRITICALHitachi Vantara Pentaho Data Integration & Analytics - Missing AuthorizationEPSS 0.4%CVE-2025-11159CRITICALHitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party ComponentEPSS 0.3%CVE-2026-2253HIGHHitachi Vantara Pentaho Data Integration & Analytics - Improper Restriction of XML External Entity ReferenceEPSS 0.2%CVE-2026-2255MEDIUMHitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected CredentialsEPSS 0.2%CVE-2026-2254MEDIUMHitachi Vantara Pentaho Data Integration & Analytics - Incorrect Permission Assignment for Critical ResourceEPSS 0.2%