CVE-2025-9122CWE-209

CVE-2025-9122

Medium · published December 16, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
20.0
In the wild
Unconfirmed
What it is

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00285 · 20.0th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2025-12-16T04:15Z
References (1)
https://support.pentaho.com/hc/en-us/articles/41833799577741--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Generation-of-Error-Message-Containing-Sensitive-Information-Versions-before-10-2-0-4-Impacted-CVE-2025-9122 · [email protected]
EPSS history
Timeline
  • 15 DEC 22:50Z
    Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information
    cvelistv5