CVE-2023-5617: Hitachi Vantara Pentaho Data Integration And Analytics

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat when a server error is encountered.

Affected products

  • Hitachi Vantara Pentaho Data Integration And Analytics: before 9.3.0.6 (fixed in 9.3.0.6); from 9.4.0.0, before 10.1.0.0 (fixed in 10.1.0.0)

Published 2024-02-28. Last modified 2026-06-17.