Skip to content
OpenAdvisories
High · 7.7 CVE-2026-2253 EUVD-2026-32047GHSA-p37q-jm8v-rgqf

Hitachi Vantara Pentaho Data Integration & Analytics - Improper Restriction of XML External Entity Reference

Published May 27, 2026 · Updated May 27, 2026 · Assigned by HITVAN

Vendor: Hitachi Vantara Product: Pentaho Data Integration and Analytics

Description

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0, including 9.3.x and 8.3.x, does not prevent certain XML parsers from resolving external entities.

Affected products

VendorProductAffectedFixed
Hitachi Vantara Pentaho Data Integration and Analytics 1.0 – < 10.2.0.7, 10.0 – < 11.0.0 10.2.0.7

References