CVE-2022-43770: Hitachivantara Pentaho Business Analytics

High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Hitachi Vantara Pentaho Business Analytics Server versions before 9.3.0.0, 9.2.0.4 and 8.3.0.27 does not correctly perform an authorization check in the dashboard editor plugin API.   

Affected products

• Hitachivantara Pentaho Business Analytics: before 8.3.0.27 (fixed in 8.3.0.27); from 9.2.0.0, before 9.2.0.4 (fixed in 9.2.0.4)

Published 2023-04-11. Last modified 2026-06-17.