[ Vendor · 5 CVEs ]
Hitachi Vantara
CVEs affecting Hitachi Vantara published in the last 30 days, plus any Hitachi Vantara CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-108335 | 14 Oct 2026 | CVSS 9.1 | Hitachi Vantara Remote Ops AgentWhen the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack. There… | |
| CVE-2026-108336 | 14 Oct 2026 | CVSS 9.1 | Hitachi Vantara Remot Ops AgentWhen the default self-signed certificate is used, an attacker could gain administrative access to the application. The SSL certificate for the web… | |
| CVE-2026-108337 | 14 Oct 2026 | CVSS 7.4 | Hitachi Vantara Remot Ops AgentAn administrator could retrieve the password reset code for any user and take over the account. The password reset codes were included in the output… | |
| CVE-2022-43939 | 3 Apr 2023 | CVSS 9.8 | Hitachi Vantara Pentaho BA Server Authorization BypassHitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using… | Exploited |
| CVE-2022-43769 | 3 Apr 2023 | CVSS 7.2 | Hitachi Vantara Pentaho BA Server Special Element InjectionHitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property… | Exploited |