← Retour à la recherche de CVE

CVE-2026-2253

Hitachi Vantara Pentaho Data Integration & Analytics

Description

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0, including 9.3.x and 8.3.x, does not prevent certain XML parsers from resolving external entities.

CVSS 7.7EPSS 0.201%Risque 0.78
Voir la source
Publication
2026-05-27 04:16:26
Versions concernées
<10.2.0.7, <11.0.0.0
Type
Core software
Dernière modification
2026-07-24 12:10:00
Vecteur
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N