critical9.1
CVE-2025-11159
Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution wh…
Impact
Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new connection is created by a data source administrator.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hitachi | Vantara Pentaho Data Integration And Analytics | before 10.2.0.7 |