Hitachi Vantara vendor intelligence
Hitachi Vantara Known Exploited Vulnerabilities
Track evidence-backed exploitation affecting Hitachi Vantara products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.
- Total KEVs
- 3
- Known exploited vulnerabilities affecting Hitachi Vantara products
- In CISA KEV
- 2
- Records also listed in the official catalog
- Beyond CISA KEV
- 1
- Additional exploited CVEs absent from CISA KEV
- Sensor Observed
- 0
- Hitachi Vantara KEVs with sensor-observed exploitation activity
The catalog gap matters for Hitachi Vantara exposure
One of the three exploited Hitachi Vantara CVEs tracked here are not in CISA KEV. Teams relying on the official catalog alone would miss one-third of this vendor portfolio.
- 67%
- Covered by CISA
- 33%
- Beyond CISA
- 2
- Product families
Attested Hitachi Vantara CVEs
Search the exploited-vulnerability portfolio, then narrow it to official CISA coverage or the additional records KEV Intelligence tracks beyond the catalog.
How exploitation is verified| CVE / description | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2021-31602
An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The Security Model has... |
Pentaho | High | Beyond CISA | 01 Jul 2025 |
|
CVE-2022-43939
Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions |
Pentaho Business Analytics Server | Confirmed | In CISA | 03 Mar 2025 |
|
CVE-2022-43769
Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) |
Pentaho Business Analytics Server | Confirmed | In CISA | 03 Mar 2025 |
No Hitachi Vantara CVEs match this search or filter.
Showing 3 of 3 Hitachi Vantara known exploited vulnerabilities.
Recurring weakness patterns
Authentication, use, and neutralization account for three mapped occurrences across this Hitachi Vantara KEV portfolio.
Early warning alerts
Get alerts on high-impact exploitation
Receive curator-selected alerts when exploitation activity warrants attention. Each alert includes the evidence and context needed to decide what requires attention now.