CVE-2022-43939 CISA KEV · Actively exploited
Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
CVSS score
—
EPSS probability
%92.3
Risk score
—
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Pentaho BA Server EE 9.3.0.0-428 - Remote Code Execution (RCE) (Unauthenticated)
Makefile Go / Python
Nuclei: Hitachi Pentaho Business Analytics Server - Bypass Authorization
Makefile Go / Python
Similar Vulnerabilities
9.1
CVE-2026-108335
Password Reset Functionality Missing Brute-Force Protection
HV
Patch status unknownEPSS %0
7.4
CVE-2026-108337
Password Reset Code Accessible in User Listing API
HV
Patch status unknownEPSS %0
9.1
CVE-2026-108336
Token Signing Key Allows Unauthenticated Administrative Access
HV
Patch status unknownEPSS %0
-
CVE-2022-43769 Actively exploited
Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
HV
Workaround Public Exploits:2EPSS %98
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-43939"