Browse CVEs

HIGH 7.5 CVE-2023-1995 Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue af… Hirdb Server With Additional Function after 10-06-01 Fix from $1,9502023-08-29 HIGH 7.8 CVE-2023-39984 ** UNSUPPORTED WHEN ASSIGNED ** Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Hitachi EH-VIEW (KeypadDesig… Eh View Mitigation only Fix from $1,9502023-08-23 HIGH 7.8 CVE-2023-39985 ** UNSUPPORTED WHEN ASSIGNED ** Out-of-bounds Write vulnerability in Hitachi EH-VIEW (Designer) allows local attackers to potentially execute arbitra… Eh View Mitigation only Fix from $1,9502023-08-23 HIGH 7.8 CVE-2023-3495 ** UNSUPPORTED WHEN ASSIGNED ** Out-of-bounds Write vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially execute a… Eh View Mitigation only Fix from $1,9502023-08-23 MEDIUM 5.5 CVE-2023-39986 ** UNSUPPORTED WHEN ASSIGNED ** Out-of-bounds Read vulnerability in Hitachi EH-VIEW (Designer) allows local attackers to potentially disclose informa… Eh View Mitigation only Fix from $1,6002023-08-23 CRITICAL 9.8 CVE-2022-4146 Expression Language Injection vulnerability in Hitachi Replication Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitach… Replication Manager 8.8.5-02+ Fix from $2,3002023-07-18 HIGH 8.1 CVE-2023-34143 Improper Validation of Certificate with Host Mismatch vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manage… Device Manager 8.8.5-02+ Fix from $1,9502023-07-18 HIGH 7.5 CVE-2023-34142 Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agen… Device Manager 8.8.5-02+ Fix from $1,9502023-07-18 HIGH 7.8 CVE-2020-36695 Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component), Hitachi Tiered Storage Manager on L… Compute Systems Manager 8.8.3-08 / 8.8.5-02+ Fix from $1,9502023-07-18 HIGH 8.8 CVE-2022-4815 Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x deserialize untrusted JSON data without constr… Vantara Pentaho after 9.3.0.3 Fix from $1,9502023-05-24 MEDIUM 6.1 CVE-2023-30469 Cross-site Scripting vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component) allows Reflected XSS.This issue… Ops Center Analyzer Mitigation only Fix from $1,6002023-05-23 CRITICAL 9.8 CVE-2022-43939 KEVEPSS 92% Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canoni… Vantara Pentaho Business Analytics Server 9.3.0.2+ Fix from $2,3002023-04-03 HIGH 8.8 CVE-2022-43938EPSS 26% Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator to disab… Vantara Pentaho Business Analytics Server 9.3.0.2+ Fix from $1,9502023-04-03 HIGH 8.8 CVE-2022-43940 Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly perform an authorization chec… Vantara Pentaho Business Analytics Server 9.3.0.2+ Fix from $1,9502023-04-03 MEDIUM 6.5 CVE-2022-43941 Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly protect the Post Analysis ser… Vantara Pentaho Business Analytics Server 9.3.0.2+ Fix from $1,6002023-04-03 MEDIUM 6.1 CVE-2022-4771 Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow a malicious URL to inject content into… Vantara Pentaho Business Analytics Server 9.3.0.2+ Fix from $1,6002023-04-03 MEDIUM 6.5 CVE-2022-43771EPSS 24% Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x, using the Pentaho Data Access plugin exposes … Vantara Pentaho Business Analytics Server 9.3.0.1+ Fix from $1,6002023-04-03 MEDIUM 6.5 CVE-2022-43772 Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x with the Big Data Plugin expose the username a… Vantara Pentaho Business Analytics Server 9.3.0.1+ Fix from $1,6002023-04-03 MEDIUM 6.3 CVE-2022-3960 Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator to disab… Vantara Pentaho Business Analytics Server 9.3.0.2+ Fix from $1,6002023-04-03 HIGH 8.8 CVE-2022-43773EPSS 22% Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x is installed with a sample HSQLDB data sourc… Vantara Pentaho Business Analytics Server 9.3.0.2+ Fix from $1,9502023-04-03 HIGH 7.2 CVE-2022-43769 KEVEPSS 98% Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property v… Vantara Pentaho Business Analytics Server 9.3.0.2+ Fix from $1,9502023-04-03 HIGH 8.1 CVE-2022-4895 Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center An… Infrastructure Analytics Advisor 10.9.1-00+ Fix from $1,9502023-02-28 HIGH 7.1 CVE-2020-36652 Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Advisor on Linux (Hitachi Infra… Automation Director 10.9.1-00+ Fix from $1,9502023-02-28 HIGH 7.1 CVE-2022-3884 Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID Agent component) allows local… Ops Center Analyzer 10.9.1-00+ Fix from $1,9502023-02-28 HIGH 8.8 CVE-2022-4041 Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escal… Storage Plug In Mitigation only Fix from $1,9502023-01-31 HIGH 8.8 CVE-2022-4441 Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escal… Storage Plug In Mitigation only Fix from $1,9502023-01-31 HIGH 7.1 CVE-2020-36611 Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Linux (Hitachi Tuning Manager server, Hitachi Tuning Manager - Agent for RAI… Tuning Manager 8.8.5-00+ Fix from $1,9502023-01-17 MEDIUM 6.1 CVE-2021-4266 A vulnerability classified as problematic has been found in Webdetails cpf up to 9.5.0.0-80. Affected is an unknown function of the file core/src/mai… Community Plugin Framework 9.5.0.0-81+ Fix from $1,6002022-12-21 MEDIUM 6.5 CVE-2021-45448 Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 using the Pentaho Analyzer plugin exposes a service endpoint for templates w… Vantara Pentaho 8.3.0.25 / 9.2.0.2+ Fix from $1,6002022-11-02 HIGH 7.5 CVE-2021-45447 Hitachi Vantara Pentaho Business Analytics Server versions before 9.3.0.0, 9.2.0.2 and 8.3.0.25 with the Data Lineage feature enabled transmits data… Vantara Pentaho 8.3.0.25 / 9.2.0.2+ Fix from $1,9502022-11-02