← CVE Intelligence

CVE-2022-3695

Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation PUBLISHED

Description (CNA)

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.3.0.0, 9.2.0.4 and 8.3.0.27 allow a malicious URL to inject content into a dashboard when the CDE plugin is present.   

Affected (CNA)

Vendor / productVersions
Hitachi Vantara / Pentaho Business Analytics Serveraffected 1.0 before 8.3.0.27; affected 9.0.0.0 before 9.2.0.4

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.