Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Pentaho Data Integration & Analytics — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in Pentaho Data Integration & Analytics, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerability disclosures for Pentaho Data Integration and Analytics, a data management solution primarily associated with the Insecure Deserialization weakness class. The collection comprises reported flaws and their corresponding remediation advisories published between 2012 and 2023. Readers can utilize this index to monitor the vendor’s response patterns over time, analyze the prevalence of specific coding flaws within the software architecture, or review the complete vulnerability history for this particular product line to assess its long-term security posture. The data serves as a centralized reference for security professionals seeking to understand the evolution of risks in Pentaho’s integration suite without navigating fragmented vendor bulletins. By consolidating these records, the page facilitates comparative analysis of patch frequencies and severity trends, enabling teams to contextualize recent alerts within a broader historical framework. This structured overview supports due diligence processes and risk assessment activities by providing a clear timeline of discovered issues and their resolution status. It is important to note that the aggregation focuses on publicly available information, and users should always verify details against official vendor sources for critical operational decisions. The dataset reflects the intersection of specific software components and recurring security misconfigurations, offering insights into the specific attack vectors that have targeted Pentaho products during this period.

Vendor: Hitachi Vantara

CVE ID Title CVSS Severity Published
CVE-2025-24907 Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal CWE-35 6.8 Medium 2025-04-16
CVE-2025-24908 Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal CWE-35 6.8 Medium 2025-04-16
CVE-2025-0756 Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection') CWE-99 9.1 Critical 2025-04-16
CVE-2024-37363 Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization CWE-862 6.5 Medium 2025-02-19
CVE-2024-37362 Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials CWE-522 6.3 Medium 2025-02-19
CVE-2024-6697 Hitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges CWE-280 6.5 Medium 2025-02-19
CVE-2024-6696 Hitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access Control CWE-1220 4.9 Medium 2025-02-19
CVE-2024-37361 Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data CWE-502 9.9 Critical 2025-02-19
CVE-2024-37360 Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-79 4.4 Medium 2025-02-19
CVE-2024-37359 Hitachi Vantara Pentaho Business Analytics Server – Server Side Request Forgery CWE-918 8.6 High 2025-02-19
CVE-2024-5705 Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization CWE-863 8.8 High 2025-02-19
CVE-2024-5706 Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection') CWE-99 8.8 High 2025-02-19
CVE-2024-28981 Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials CWE-522 8.5 High 2024-09-11
CVE-2023-5617 Hitachi Vantara Pentaho Data Integration & Analytics - Server-generated Error Message Containing Sensitive Information CWE-550 5.3 Medium 2024-02-28
CVE-2023-3517 Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection') CWE-99 8.5 High 2023-12-12

All 15 known CVE vulnerabilities affecting Pentaho Data Integration & Analytics with full Chinese analysis, references, and POCs where available.