CVE-2024-28981: Hitachi Vantara Pentaho Data Integration & Analytics

High severity, CVSS 8.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.8, including 8.3.x, discloses database passwords when searching metadata injectable fields.

Affected products

• Hitachi Vantara Pentaho Data Integration & Analytics: from 1.0, before 9.3.0.8 (fixed in 9.3.0.8); from 9.4.0.0, before 10.1.0.0 (fixed in 10.1.0.0)

Published 2024-09-12. Last modified 2026-06-17.