Pentaho Bi Server
3 CVEs affecting Pentaho Bi Server. Latest disclosed: 2011-09-13. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2009-5101 | | 2011-09-13 | Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obtain it from session history, referer hea… | |
CVE-2009-5100 | | 2011-09-13 | Pentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages using a password field, which might allow physically proximate a… | |
CVE-2009-5099 | | 2011-09-13 | Cross-site scripting (XSS) vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and earlier allows remote attackers to inject arbitrary web script or HT… |