← Database

CVE-2026-2253

HIGH CVSS: 7.7 Published: 2026-05-27 Modified: 2026-07-24

Description

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0, including 9.3.x and 8.3.x, does not prevent certain XML parsers from resolving external entities.

Affected Platforms

Hitachi Vantara Pentaho Data Integration And Analytics

Weakness Type

CWE-611

References