← CVE Intelligence

CVE-2024-28983

Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') PUBLISHED

Description (CNA)

Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content into the Analyzer plugin interface.

Affected (CNA)

Vendor / productVersions
Hitachi Vantara / Pentaho Business Analytics Serveraffected 1.0 before 9.3.0.7; affected 8.3 before 10.1.0.0

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.