Hitachi Vantara Pentaho Business Analytics (BA) Server: 2 exploited vulnerabilities (CVE-2022-43769, CVE-2022-43939) ยท updates https://pwn.watch/i/hitachi-vantara-pentaho-business-analytics-ba-server-cve-2022-43769 CVE-2022-43769: Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution. CVE-2022-43939: Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization. Added to CISA KEV on 2025-03-03. en Mon, 03 Mar 2025 00:00:00 GMT Hitachi Vantara Pentaho Business Analytics (BA) Server: 2 exploited vulnerabilities (CVE-2022-43769, CVE-2022-43939): CISA added CVE-2022-43769 to the KEV catalog (due 2025-03-24). https://pwn.watch/i/hitachi-vantara-pentaho-business-analytics-ba-server-cve-2022-43769 https://pwn.watch/i/hitachi-vantara-pentaho-business-analytics-ba-server-cve-2022-43769#2025-03-03-5c0e1821 Mon, 03 Mar 2025 00:00:00 GMT high <p>Hitachi Vantara Pentaho Business Analytics (BA) Server: 2 exploited vulnerabilities (CVE-2022-43769, CVE-2022-43939): CISA added CVE-2022-43769 to the KEV catalog (due 2025-03-24).</p> Hitachi Vantara Pentaho Business Analytics (BA) Server: 2 exploited vulnerabilities (CVE-2022-43769, CVE-2022-43939): CISA added CVE-2022-43939 to the KEV catalog (due 2025-03-24). https://pwn.watch/i/hitachi-vantara-pentaho-business-analytics-ba-server-cve-2022-43769 https://pwn.watch/i/hitachi-vantara-pentaho-business-analytics-ba-server-cve-2022-43769#2025-03-03-0e29c490 Mon, 03 Mar 2025 00:00:00 GMT high <p>Hitachi Vantara Pentaho Business Analytics (BA) Server: 2 exploited vulnerabilities (CVE-2022-43769, CVE-2022-43939): CISA added CVE-2022-43939 to the KEV catalog (due 2025-03-24).</p>