← Database

CVE-2022-43939

HIGH CVSS: 8.6 Published: 2023-04-03 Modified: 2026-06-17

Description

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented.

Affected Platforms

Hitachi Vantara Pentaho Business Analytics Server

Weakness Type

CWE-647, NVD-CWE-noinfo

References