← All credits
Harry Withington, Aura Information Security
9 vulnerability records and advisories credit this contributor.
CVE-2022-43769
Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
CVE-2022-43939
Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions
CVE-2022-43938
Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
CVE-2022-43940
Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
CVE-2022-43771
Hitachi Vantara Pentaho Business Analytics Server - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-43773
Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource
CVE-2022-43941
Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference
CVE-2022-3960
Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
CVE-2022-43772
Hitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log File