ZeusQA
Start free

Known exploited vulnerabilities

Hitachi Vantara vulnerabilities attackers have used

Every Hitachi Vantara vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 2 Hitachi Vantara vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2022-43939, added Mar 3, 2025. Pentaho Business Analytics (BA) Server has the most entries (2).

In KEV, all time
2
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

Every Hitachi Vantara entry in CISA KEV

  1. CVE-2022-43939

    Added · due

    Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

    Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization.

  2. CVE-2022-43769

    Added · due

    Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability

    Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works