CVE-2025-9122

—

CVSS 3.1

5.3 medium

EPSS

<1%p20

Published

Dec 15, 2025 (Dec 15, 2025)

Modified

Jun 17, 2026

Description

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.

Weakness: CWE-209
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.