Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Hitachi Vantara Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-2253`Hitachi Vantara Pentaho Data Integration & Analytics - Improper Restriction of XML External Entity Reference	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published05/27/2026	SeverityHigh
`CVE-2026-2255`Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published05/27/2026	SeverityMedium
`CVE-2026-2254`Hitachi Vantara Pentaho Data Integration & Analytics - Incorrect Permission Assignment for Critical Resource	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published05/27/2026	SeverityMedium
`CVE-2025-11159`Hitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party Component	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published05/13/2026	SeverityCritical
`CVE-2025-11158`Hitachi Vantara Pentaho Data Integration & Analytics - Missing Authorization	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published03/09/2026	SeverityCritical
`CVE-2025-9121`Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published12/15/2025	SeverityHigh
`CVE-2025-9122`Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published12/15/2025	SeverityMedium
`CVE-2025-24907`Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published04/16/2025	SeverityMedium
`CVE-2025-24911`Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/16/2025	SeverityMedium
`CVE-2025-24910`Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/16/2025	SeverityMedium
`CVE-2025-24909`Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/16/2025	SeverityMedium
`CVE-2025-24908`Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published04/16/2025	SeverityMedium
`CVE-2025-0756`Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published04/16/2025	SeverityCritical
`CVE-2025-0757`Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/16/2025	SeverityMedium
`CVE-2025-0758`Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/16/2025	SeverityMedium
`CVE-2024-37363`Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published02/19/2025	SeverityMedium
`CVE-2024-37362`Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published02/19/2025	SeverityMedium
`CVE-2024-6697`Hitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published02/19/2025	SeverityMedium
`CVE-2024-6696`Hitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access Control	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published02/19/2025	SeverityMedium
`CVE-2024-37361`Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published02/19/2025	SeverityCritical
`CVE-2024-37360`Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published02/19/2025	SeverityMedium
`CVE-2024-37359`Hitachi Vantara Pentaho Business Analytics Server – Server Side Request Forgery	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published02/19/2025	SeverityHigh
`CVE-2024-5705`Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published02/19/2025	SeverityHigh
`CVE-2024-5706`Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published02/19/2025	SeverityHigh
`CVE-2024-28981`Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published09/11/2024	SeverityHigh
`CVE-2024-28984`Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published06/26/2024	SeverityHigh
`CVE-2024-28983`Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published06/26/2024	SeverityHigh
`CVE-2024-28982`Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published06/26/2024	SeverityHigh
`CVE-2023-5617`Hitachi Vantara Pentaho Data Integration & Analytics - Server-generated Error Message Containing Sensitive Information	Exploitation statusNot known exploited	FixYes	Affected productPentaho Data Integration and Analytics	Published02/28/2024	SeverityMedium
`CVE-2023-3517`Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')	Exploitation statusNot confirmed	FixYes	Affected productPentaho Data Integration and Analytics	Published12/12/2023	SeverityHigh
`CVE-2023-6538`System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products is susceptible to unintended information disclosure via unprivileged access to SMU configuration backup data.	Exploitation statusNot confirmed	FixYes	Affected productSystem Management Unit (SMU)	Published12/11/2023	SeverityHigh
`CVE-2023-5808`System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products are susceptible to unintended information disclosure via unprivileged access to HNAS configuration backup and diagnostic data.	Exploitation statusNot known exploited	FixYes	Affected productSystem Management Unit (SMU)	Published12/04/2023	SeverityHigh
`CVE-2023-2358`Hitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Format	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published09/26/2023	SeverityMedium
`CVE-2022-4815`Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published05/24/2023	SeverityHigh
`CVE-2023-1158`Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published05/24/2023	SeverityMedium
`CVE-2022-43770`Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/11/2023	SeverityMedium
`CVE-2022-3695`Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/11/2023	SeverityMedium
`CVE-2022-4771`Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/03/2023	SeverityMedium
`CVE-2022-4770`Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/03/2023	SeverityMedium
`CVE-2022-4769`Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/03/2023	SeverityMedium
`CVE-2022-43772`Hitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log File	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/03/2023	SeverityLow
`CVE-2022-3960`Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/03/2023	SeverityMedium
`CVE-2022-43941`Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/03/2023	SeverityHigh
`CVE-2022-43771`Hitachi Vantara Pentaho Business Analytics Server - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/03/2023	SeverityMedium
`CVE-2022-43940`Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/03/2023	SeverityHigh
`CVE-2022-43939`Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions	Exploitation statusKEV	FixYes	Affected productPentaho Business Analytics Server	Published04/03/2023	SeverityHigh
`CVE-2022-43938`Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/03/2023	SeverityHigh
`CVE-2022-43773`Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published04/03/2023	SeverityHigh
`CVE-2022-43769`Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)	Exploitation statusKEV	FixYes	Affected productPentaho Business Analytics Server	Published04/03/2023	SeverityHigh
`CVE-2021-45448`Pentaho Business Analytics Server - Pentaho Analyzer plugin exposes a service endpoint for templates which allows a user supplied path to access resources that are out of bounds.	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published11/02/2022	SeverityHigh
`CVE-2021-45447`Pentaho Business Analytics Server - With the Data Lineage feature enabled, the system transmits database passwords in clear text	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published11/02/2022	SeverityHigh
`CVE-2021-45446`Pentaho Business Analytics Server - Exposure of Information Through Directory Listing	Exploitation statusNot known exploited	FixYes	Affected productPentaho Business Analytics Server	Published11/02/2022	SeverityMedium
`CVE-2021-28052`Hitachi Content Platform Information Disclosure Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productHitachi Content Platform	Published09/26/2022	SeverityHigh

53 / 53 Results

All vulnerabilities loaded

Security vulnerabilities from Hitachi Vantara

Hitachi Vantara

Filters

Run an in-depth assessment with complete web risk management

Popular Hitachi Vantara products

Pentaho Business Analytics Server

Pentaho Data Integration and Analytics

System Management Unit (SMU)

Hitachi Content Platform