pentaho kayıtları
pentaho üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2006-5675Kavram kanıtı | Multiple unspecified vulnerabilities in Pentaho Business Intelligence (BI) Suite before 1.2 RC3 (1.2.0.470-RC3) have unknown impact and attapentaho · business intelligence suite | Kritik10,0 | — | %1,5 | 2 Kas 2006 |
21İzleyin | CVE-2015-6940İstismar yok | The GetResource servlet in Pentaho Business Analytics (BA) Suite 4.5.x, 4.8.x, and 5.0.x through 5.2.x and Pentaho Data Integration (PDI) Supentaho · data integration · CWE-200 | Orta5,0 | — | %2,2 | 22 Eyl 2015 |
20İzleyin | CVE-2009-5101İstismar yok | Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obtain it from session hpentaho · bi server · CWE-200 | Orta5,0 | — | %1,1 | 13 Eyl 2011 |
17İzleyin | CVE-2009-5099İstismar yok | Cross-site scripting (XSS) vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and earlier allows remote attackers to inject arbitrapentaho · bi server · CWE-79 | Orta4,3 | — | %1,1 | 13 Eyl 2011 |
8İzleyin | CVE-2009-5100İstismar yok | Pentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages using a password field, which might allow phypentaho · bi server · CWE-200 | Düşük2,1 | — | %0,4 | 13 Eyl 2011 |
- CVE-2006-567540Planlayın
Multiple unspecified vulnerabilities in Pentaho Business Intelligence (BI) Suite before 1.2 RC3 (1.2.0.470-RC3) have unknown impact and atta
KritikCVSS 10,0Kavram kanıtıEPSS %1pentaho · business intelligence suite2 Kas 2006
- CVE-2015-694021İzleyin
The GetResource servlet in Pentaho Business Analytics (BA) Suite 4.5.x, 4.8.x, and 5.0.x through 5.2.x and Pentaho Data Integration (PDI) Su
OrtaCVSS 5,0İstismar yokEPSS %2pentaho · data integration22 Eyl 2015
- CVE-2009-510120İzleyin
Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obtain it from session h
OrtaCVSS 5,0İstismar yokEPSS %1pentaho · bi server13 Eyl 2011
- CVE-2009-509917İzleyin
Cross-site scripting (XSS) vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and earlier allows remote attackers to inject arbitra
OrtaCVSS 4,3İstismar yokEPSS %1pentaho · bi server13 Eyl 2011
- CVE-2009-51008İzleyin
Pentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages using a password field, which might allow phy
DüşükCVSS 2,1İstismar yokEPSS %0pentaho · bi server13 Eyl 2011