ZeroHour

CVE-2026-2253

CVSS 3.1
7.7 high
EPSS
<1%p10
Published
()
Modified
Description

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0, including 9.3.x and 8.3.x, does not prevent certain XML parsers from resolving external entities.

Vendors
hitachi
Products
vantara pentaho data integration and analytics
Weakness
CWE-611
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.