Hitachi Pentaho Business Analytics Server vulnerabilities

3 CVEs affecting Hitachi Pentaho Business Analytics Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-28984, published 2024-06-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-28982, published 2024-06-26. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. Hitachi Vantara Pentaho Business Analytics Server versions before 10.1.0.0 and 9.3.0.7, including 8.3.x do not correctly protect the ACL service endpoint of the Pentaho User Console against XML…
CVE-2024-28983, published 2024-06-26. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content into the Analyzer plugin interface.
CVE-2024-28984, published 2024-06-26. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content into the Analyzer plugin interface.