pentaho business analytics vulnerabilities and fixes

Recent CVEs affecting pentaho business analytics, with upgrade or downgrade steps. 3 tracked.

Also searched as: pentahobusinessanalytics.

pentaho business analytics has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-09-27. Highest priority: CVE-2022-3695 (score 35/100).

• CVE-2023-2358 MEDIUM 4.3 UPGRADE Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.5.0.0 and 9.3.0.4, including 8.3.x.x, s
• CVE-2022-43770 MEDIUM 5.4 UPGRADE Hitachi Vantara Pentaho Business Analytics Server versions before 9.3.0.0, 9.2.0.4 and 8.3.0.27 does not corr
• CVE-2022-3695 MEDIUM 6.5 UPGRADE Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.3.0.0, 9.2.0.4 and 8.3.0.27 allow a mal

FAQ

How do I fix pentaho business analytics vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is pentaho business analytics being exploited right now?

None of the tracked pentaho business analytics CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which pentaho business analytics CVE should I patch first?

CVE-2022-3695 currently ranks highest (35/100): Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.3.0.0, 9.2.0.4 and 8.3.0.27 allow a mal.

RSS feed for pentaho business analytics · ← Back to latest CVEs