Information disclosure in Hitachi Vantara Pentaho Data Integration And Analytics
CVE-2025-9122
Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.
EPSS: 0.003 (16.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Hitachi Vantara Pentaho Data Integration And Analytics — versions 1.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-9122?
- CVE-2025-9122 is a medium-severity vulnerability in Hitachi Vantara Pentaho Data Integration And Analytics, classified under Generation of Error Message Containing Sensitive Information. CVSS score: 5.3/10. Published 2025-12-15.
- How severe is CVE-2025-9122?
- Medium severity. CVSS v3 base score is 5.3 out of 10.