Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-9122 EUVD-2025-203472GHSA-6q25-989c-gvw8

Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information

Published Dec 15, 2025 · Updated Dec 16, 2025 · Assigned by HITVAN

Description

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.

Affected products

VendorProductAffectedFixed
Hitachi Vantara Pentaho Data Integration and Analytics 1.0 – < 10.2.0.4 10.2.0.4

References