CoreCVE
Back

MEDIUM

Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation

Published Apr 11, 2023

Description

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.3.0.0, 9.2.0.4 and 8.3.0.27 allow a malicious URL to inject content into a dashboard when the CDE plugin is present.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner HITVAN
Published Apr 11, 2023
Updated Feb 7, 2025
Reserved Oct 26, 2022
Link CVE-2022-3695
CISA Vulnrichment
Updated Feb 7, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-3695
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-3695
ENISA EUVD
Assigner HITVAN
Published Apr 11, 2023
Updated Feb 7, 2025
Exploited since n/a
Link EUVD-2022-43054
EUVD-2022-43054