Vulnerabilities > Hitachi > Pentaho Business Analytics Server > High

DATE	CVE	VULNERABILITY TITLE	RISK
2024-06-26	CVE-2024-28982	XML Entity Expansion vulnerability in Hitachi Pentaho Business Analytics Server Hitachi Vantara Pentaho Business Analytics Server versions before 10.1.0.0 and 9.3.0.7, including 8.3.x do not correctly protect the ACL service endpoint of the Pentaho User Console against XML External Entity Reference. network low complexity hitachi CWE-776	8.2

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.