CVE-2025-11159: Hitachi Vantara Pentaho Data Integration And Analytics

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new connection is created by a data source administrator.

Affected products

• Hitachi Vantara Pentaho Data Integration And Analytics: before 10.2.0.7 (fixed in 10.2.0.7)

Published 2026-05-13. Last modified 2026-10-07.