CVE-2020-24669

The New Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a DOM-based Cross-site scripting vulnerability, which allows an authenticated…

published January 29, 2021

CVSS
—
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

The New Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a DOM-based Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'Analysis Report Description' field in 'About this Report' section. Remediated in >= 8.3.0.9, >= 9.0.0.1, and >= 9.1.0.0 GA.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00620 · 49.1th percentile
Published
2021-01-29T18:46Z
EPSS history
Timeline
  • 29 JAN 18:46Z
    The New Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a DOM-based Cross-site scripting vulnerability, which allows an authenticated…
    cvelistv5