VULNERABILITY INTELLIGENCE

CVE-2022-43939

CVSS score8.6 HIGH
EPSS probability92.27%
CISA KEVKnown exploited vulnerability
Published2023-04-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Known Exploited Vulnerability

Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

Vendor / product: Hitachi Vantara / Pentaho Business Analytics (BA) Server

Description

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented.

Weakness classification

  • security.vulnerabilities@hitachivantara.com: CWE-647
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references