CVE-2022-43769: Hitachi Vantara Pentaho BA Server Special Element Injection
Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability. Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution.
- CISA KEV-listed (remediation due 2025-03-24)
- EPSS 94.0% (99.9% percentile)