NVD disclosure day
CVE-2022-43939
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Hitachi Vantara Pentaho Business Analytics Server has a security flaw allowing unauthorized access via URL manipulation. This impacts organizations by exposing sensitive data and systems. The realistic business risk includes potential data breaches and system compromise, affecting operational integrity.
CVE-2022-43769
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Hitachi Vantara Pentaho Business Analytics Server is affected by an injection vulnerability. This can allow attackers to execute arbitrary commands, potentially compromising data and disrupting operations. Organizations should identify and mitigate this risk to protect their systems.
CVE-2023-26119
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
The HtmlUnit library contains a critical vulnerability that may allow remote code execution when processing content from an attacker's webpage. This could enable an attacker to run unauthorized commands on systems using the affected library, particularly impacting development and testing environments.