Vulnerabilities > Hitachivantara > Pentaho Business Analytics > High

DATE CVE VULNERABILITY TITLE RISK
2023-04-11 CVE-2022-43770 Incorrect Authorization vulnerability in Hitachivantara Pentaho Business Analytics
Hitachi Vantara Pentaho Business Analytics Server versions before 9.3.0.0, 9.2.0.4 and 8.3.0.27 does not correctly perform an authorization check in the dashboard editor plugin API.
network
low complexity
hitachivantara CWE-863
8.1
2017-11-28 CVE-2016-10701 Cross-Site Request Forgery (CSRF) vulnerability in Hitachivantara Pentaho Business Analytics 8.0
In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application.
network
low complexity
hitachivantara CWE-352
8.8