Skip to content
OpenAdvisories

Archive

3 April 2023

Vulnerabilities first published on this day (UTC), newest first.

← March 2023 2023 / April /3 May 2023 →
  1. 119
  2. 211
  3. 346
  4. 4165
  5. 5139
  6. 6111
  7. 799
  8. 820
  9. 915
  10. 1078
  11. 11239
  12. 12105
  13. 1342
  14. 14111
  15. 1565
  16. 1638
  17. 1786
  18. 18191
  19. 1994
  20. 2054
  21. 2161
  22. 2231
  23. 2326
  24. 24114
  25. 2599
  26. 2659
  27. 2772
  28. 28111
  29. 2913
  30. 303
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.6
    CVE-2022-43939 Exploited Public exploit Scanner template EPSS 92%

    Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions

    Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented.

    Hitachi Vantara Pentaho Business Analytics Server
    KEV Mar 3, 2025
  • High 8.8
    CVE-2022-43769 Exploited Public exploit Scanner template EPSS 98%

    Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

    Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream.

    Hitachi Vantara Pentaho Business Analytics Server
    KEV Mar 3, 2025
  • High 7.8
    CVE-2023-26269 Public exploit

    Apache James server: Privilege escalation through unauthenticated JMX

    Apache James server version 3.7.3 and earlier provides a JMX management service without authentication by default. This allows privilege escalation by a malicious local user. Administrators are advised to disable JMX, or set up a JMX password. Note that versi…

    Apache Software Foundation Apache James server org.apache.james:javax-mail-extension Maven
  • Unscored —
    CVE-2022-27665 Public exploit EPSS 33%

    Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0. This can lead…