Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Pentaho Data Integration and Analytics — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Pentaho Data Integration and Analytics, with AI-generated Chinese analysis, references, and POCs.

Vendor: Hitachi Vantara

CVE IDTitleCVSSSeverityPublished
CVE-2026-2253 Hitachi Vantara Pentaho Data Integration & Analytics - Improper Restriction of XML External Entity Reference CWE-611 7.7 High2026-05-27
CVE-2026-2255 Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials CWE-522 4.3 Medium2026-05-27
CVE-2026-2254 Hitachi Vantara Pentaho Data Integration & Analytics - Incorrect Permission Assignment for Critical Resource CWE-732 6.3 Medium2026-05-27
CVE-2025-11159 Hitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party Component CWE-1395 9.1 Critical2026-05-13
CVE-2025-11158 Hitachi Vantara Pentaho Data Integration & Analytics - Missing Authorization CWE-862 9.1 Critical2026-03-09
CVE-2025-9121 Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data CWE-502 8.8 High2025-12-15
CVE-2025-9122 Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information CWE-209 5.3 Medium2025-12-15

All 7 known CVE vulnerabilities affecting Pentaho Data Integration and Analytics with full Chinese analysis, references, and POCs where available.