vantara pentaho data integration and analytics vulnerabilities and fixes

Recent CVEs affecting vantara pentaho data integration and analytics, with upgrade or downgrade steps. 4 tracked.

Also searched as: vantarapentahodataintegrationandanalytics.

vantara pentaho data integration and analytics has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-05-27. Highest priority: CVE-2025-11159 (score 39/100).

• CVE-2025-11159 CRITICAL 9.1 UPGRADE Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases wh
• CVE-2026-2253 HIGH 7.7 UPGRADE Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0, including 9.3.x an
• CVE-2026-2254 MEDIUM 6.3 UPGRADE Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6 and 11.0.0.0, including 9.3.x an
• CVE-2026-2255 MEDIUM 4.3 UPGRADE Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6 and 11.0.0.0, including 9.3.x an

FAQ

How do I fix vantara pentaho data integration and analytics vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is vantara pentaho data integration and analytics being exploited right now?

None of the tracked vantara pentaho data integration and analytics CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which vantara pentaho data integration and analytics CVE should I patch first?

CVE-2025-11159 currently ranks highest (39/100): Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases wh.

RSS feed for vantara pentaho data integration and analytics · ← Back to latest CVEs