Описание
The Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a stored Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'Display Name' parameter. Remediated in >= 9.1.0.1
Ссылки
- Vendor Advisory
- Not Applicable
- Vendor Advisory
- Not Applicable
Уязвимые конфигурации
Конфигурация 1Версия от 7.0.0 (включая) до 9.1.0.1 (исключая)
cpe:2.3:a:hitachi:vantara_pentaho:*:*:*:*:*:*:*:*
EPSS
Процентиль: 42%
0.00203
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
больше 3 лет назад
The Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a stored Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'Display Name' parameter. Remediated in >= 9.1.0.1
EPSS
Процентиль: 42%
0.00203
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79