CVE-2021-45446

7.5 highEPSS 0.5%

High (7.5) in hitachi vantara pentaho. EPSS 0.5% chance of exploitation in the next 30 days.

A vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden property to the children of the Home folder. This directory listing provides an attacker with the complete index of all the resources located inside the directory.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWEs: CWE-281, CWE-548
Published: 2022-11-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hitachi:vantara_pentaho

References

https://support.pentaho.com/hc/en-us/articles/6744813983501
https://support.pentaho.com/hc/en-us/articles/6744813983501

Check your stack JSON