浏览 49+ 条来自 NVD 与 CNNVD 的 CVE 漏洞，配 AI 中文翻译、AI POC 生成、每日情报；可按厂商、产品、严重等级、CWE 检索。
| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-11158 | Hitachi Vantara Pentaho Data Integration & Analytics - Missing Authorization | Hitachi Vantara | Pentaho Data Integration and Analytics | Critical | 9.1 | 2026-03-09 22:12:52 | Deep Dive |
| CVE-2025-9121 | Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data | Hitachi Vantara | Pentaho Data Integration and Analytics | High | 8.8 | 2025-12-15 22:53:57 | Deep Dive |
| CVE-2025-9122 | Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information | Hitachi Vantara | Pentaho Data Integration and Analytics | Medium | 5.3 | 2025-12-15 22:50:42 | Deep Dive |
| CVE-2025-24907 | Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal | Hitachi Vantara | Pentaho Data Integration & Analytics | Medium | 6.8 | 2025-04-16 22:39:16 | Deep Dive |
| CVE-2025-24911 | Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference | Hitachi Vantara | Pentaho Business Analytics Server | Medium | 4.9 | 2025-04-16 22:35:11 | Deep Dive |
| CVE-2025-24910 | Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference | Hitachi Vantara | Pentaho Business Analytics Server | Medium | 4.9 | 2025-04-16 22:32:46 | Deep Dive |
| CVE-2025-24909 | Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Hitachi Vantara | Pentaho Business Analytics Server | Medium | 4.4 | 2025-04-16 22:30:10 | Deep Dive |
| CVE-2025-24908 | Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal | Hitachi Vantara | Pentaho Data Integration & Analytics | Medium | 6.8 | 2025-04-16 22:27:04 | Deep Dive |
| CVE-2025-0756 | Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection') | Hitachi Vantara | Pentaho Data Integration & Analytics | Critical | 9.1 | 2025-04-16 22:23:19 | Deep Dive |
| CVE-2025-0757 | Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Hitachi Vantara | Pentaho Business Analytics Server | Medium | 4.4 | 2025-04-16 22:18:19 | Deep Dive |
| CVE-2025-0758 | Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource | Hitachi Vantara | Pentaho Business Analytics Server | Medium | 6.1 | 2025-04-16 22:12:30 | Deep Dive |
| CVE-2024-37363 | Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization | Hitachi Vantara | Pentaho Data Integration & Analytics | Medium | 6.5 | 2025-02-19 23:40:10 | Deep Dive |
| CVE-2024-37362 | Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials | Hitachi Vantara | Pentaho Data Integration & Analytics | Medium | 6.3 | 2025-02-19 23:34:30 | Deep Dive |
| CVE-2024-6697 | Hitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges | Hitachi Vantara | Pentaho Data Integration & Analytics | Medium | 6.5 | 2025-02-19 23:32:19 | Deep Dive |
| CVE-2024-6696 | Hitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access Control | Hitachi Vantara | Pentaho Data Integration & Analytics | Medium | 4.9 | 2025-02-19 23:29:43 | Deep Dive |
| CVE-2024-37361 | Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data | Hitachi Vantara | Pentaho Data Integration & Analytics | Critical | 9.9 | 2025-02-19 23:25:33 | Deep Dive |
| CVE-2024-37360 | Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Hitachi Vantara | Pentaho Data Integration & Analytics | Medium | 4.4 | 2025-02-19 23:01:42 | Deep Dive |
| CVE-2024-37359 | Hitachi Vantara Pentaho Business Analytics Server – Server Side Request Forgery | Hitachi Vantara | Pentaho Data Integration & Analytics | High | 8.6 | 2025-02-19 22:58:58 | Deep Dive |
| CVE-2024-5705 | Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization | Hitachi Vantara | Pentaho Data Integration & Analytics | High | 8.8 | 2025-02-19 22:55:09 | Deep Dive |
| CVE-2024-5706 | Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection') | Hitachi Vantara | Pentaho Data Integration & Analytics | High | 8.8 | 2025-02-19 22:49:47 | Deep Dive |