CVE-2022-43769: Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
Summary: CVE-2022-43769 is a special element injection vulnerability in Hitachi Vantara Pentaho Business Analytics Server that lets an attacker inject Spring templates into properties files, enabling arbitrary command execution. CISA has set a remediation due date of 2025-03-24, and known ransomware campaign use of this flaw is listed as unknown.
Bottom line: Arbitrary command execution on a business analytics server puts the data warehouse and every report it serves within reach of an attacker, and CISA's 2025-03-24 deadline leaves a fixed window to patch or mitigate.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-43769Hitachi Vantara
- Related
- CVE-2022-43939: Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability Known Exploited Vulnerabilities · Mar 03, 2025Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026