CVE-2016-10701
HIGHHitachi Vantara Pentaho Business Analytics < 8.0 - Cross-Site Request Forgery
Title source: llmDescription
In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application.
References (4)
Core 4
Core References
Issue Tracking, Third Party Advisory x_refsource_misc
http://jira.pentaho.com/browse/BISERVER-3562
Issue Tracking, Third Party Advisory x_refsource_misc
http://jira.pentaho.com/browse/BISERVER-6599
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/102200
Issue Tracking, Third Party Advisory x_refsource_misc
http://jira.pentaho.com/browse/BISERVER-13207
Scores
CVSS v3
8.8
EPSS
0.0077
EPSS Percentile
51.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-352
Status
published
Products (1)
hitachivantara/pentaho_business_analytics
< 8.0
Published
Nov 28, 2017
Tracked Since
Feb 18, 2026