CVE-2022-43941CWE-611

Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference

High · published April 3, 2023

CVSS v3.1
7.1
EPSS
1%
Percentile
44.0
In the wild
Unconfirmed
What it is

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly protect the Post Analysis service endpoint of the data access plugin against out-of-band XML External Entity Reference.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00530 · 44.0th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2023-04-03T18:44Z
EPSS history
Timeline
  • 03 APR 18:44Z
    Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference
    cvelistv5