Back to Database
Status published
Medium
CVE-2025-9122
Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information
Vulnerability Description
Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-9122
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Hitachi Group Member
More from Hitachi Vantara
View All →CVE-2025-9121
Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data
High
8.8
CVE-2025-24911
Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference
Medium
4.9
CVE-2025-24910
Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference
Medium
4.9
CVE-2025-24909
Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Medium
4.4
CVE-2025-24908
Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal
Medium
6.8
Affected Vendor
Hitachi Vantara
View all reports →Affected Software
Pentaho Data Integration and Analytics
Vulnerable Versions:
1.0
Timeline
Official Publish:
December 15th, 2025
Last Modified:
December 16th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N