NVD disclosure day

Published threat advisories for April 3, 2023

CVE advisoryKnown Exploit

CVE-2022-43939

Hitachi Vantara Pentaho BA Server Authorization Bypass

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

Hitachi Vantara Pentaho Business Analytics Server has a security flaw allowing unauthorized access via URL manipulation. This impacts organizations by exposing sensitive data and systems. The realistic business risk includes potential data breaches and system compromise, affecting operational integrity.

NVD published: • CISA KEV
CVE advisoryKnown Exploit

CVE-2022-43769

Hitachi Pentaho Business Analytics Server Property Injection Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

Hitachi Vantara Pentaho Business Analytics Server is affected by an injection vulnerability. This can allow attackers to execute arbitrary commands, potentially compromising data and disrupting operations. Organizations should identify and mitigate this risk to protect their systems.

NVD published: • CISA KEV