Description
Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0, including 9.3.x and 8.3.x, does not prevent certain XML parsers from resolving external entities.
CVSS 7.7EPSS 0.201%Risk 0.78
View source- Published
- 2026-05-27 04:16:26
- Affected versions
- <10.2.0.7, <11.0.0.0
- Type
- Core software
- Last modified
- 2026-07-24 12:10:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N