Skip to content
OpenAdvisories

Vendor

Hitachi Vantara

56 known vulnerabilities.

Products

Pentaho Business Analytics Server 37 Pentaho Data Integration & Analytics 15 Pentaho Data Integration and Analytics 7 System Management Unit (SMU) 2 Remot Ops Agent 2 Remote Ops Agent 1 Hitachi Content Platform 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.6
    CVE-2023-6538 Public exploit

    System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products is susceptible to unintended information disclosure via unprivileged access to SMU configuration backup data.

    SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in Storage, Server or combined Server+Storage administrative roles are able to access SMU configuration backup, that would n…

    Hitachi Vantara System Management Unit (SMU)
  • High 7.6
    CVE-2023-5808 Public exploit

    System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products are susceptible to unintended information disclosure via unprivileged access to HNAS configuration backup and diagnostic data.

    SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in a Storage administrative role are able to access HNAS configuration backup and diagnostic data, that would normally be ba…

    Hitachi Vantara System Management Unit (SMU)
  • High 8.6
    CVE-2022-43939 Exploited Public exploit Scanner template EPSS 92%

    Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions

    Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented.

    Hitachi Vantara Pentaho Business Analytics Server
    KEV Mar 3, 2025
  • High 8.8
    CVE-2022-43769 Exploited Public exploit Scanner template EPSS 98%

    Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

    Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream.

    Hitachi Vantara Pentaho Business Analytics Server
    KEV Mar 3, 2025