CVE-2022-3695 — Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.3.0.0, 9.2.0.4 and 8.3.0.27 allow a malicious URL to inject content into a dashboard when the CDE plugin i…
Published: 2023-04-11 · CVSS: 6.5 · CVSS 3.1
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.3.0.0, 9.2.0.4 and 8.3.0.27 allow a malicious URL to inject content into a dashboard when the CDE plugin is present.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7