VULNERABILITY INTELLIGENCE

CVE-2025-9121

CVSS score8.8 HIGH

EPSS probability0.43%

CISA KEVNot currently listed

Published2025-12-15

Last modified2026-10-07

Description

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constraining the parser to approved classes and methods.