← Database

CVE-2025-11159

CRITICAL CVSS: 9.1 Published: 2026-05-13 Modified: 2026-06-17

Description

Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new connection is created by a data source administrator.

Affected Platforms

Hitachi Vantara Pentaho Data Integration And Analytics

Weakness Type

NVD-CWE-Other

References