Hitachi Vantara Pentaho Business Intelligence Server vulnerabilities

4 CVEs affecting Hitachi Vantara Pentaho Business Intelligence Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-31602, published 2021-11-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-31602, published 2021-11-08. High severity, CVSS 7.5. EPSS: 51.7% chance of exploitation in the next 30 days. An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The Security Model has different layers of Access Control. One of these layers is…
CVE-2021-31599, published 2021-11-08. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. A reports (.prpt) file allows the inclusion of BeanShell scripts to ease the…
CVE-2021-31601, published 2021-11-08. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. They implement a series of web services using the SOAP protocol to allow scripting…
CVE-2021-31600, published 2021-11-08. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. They implement a series of web services using the SOAP protocol to allow scripting…