VULNERABILITY INTELLIGENCE

CVE-2022-43769

CVSS score8.8 HIGH
EPSS probability97.67%
CISA KEVKnown exploited vulnerability
Published2023-04-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability

Vendor / product: Hitachi Vantara / Pentaho Business Analytics (BA) Server

Description

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream.

Weakness classification

  • security.vulnerabilities@hitachivantara.com: CWE-74
  • nvd@nist.gov: CWE-94

Primary references