HV
Vendor security profile2 actively exploited CVEs
Hitachi Vantara
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical2
CISA KEV2
Public exploit2
Patch rate%0
Avg. CVSS8.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
3
CVE KEV
CVE severity distribution
5toplam CVE
Critical2 (40%)
High1 (20%)
Uncertain2 (40%)
Patch and exploitation view
%0
Verified patch
%40
CISA KEV
%40
Public exploit
0Patch available
0Partial
2Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
7.4
CVE-2026-108337
Password Reset Code Accessible in User Listing API
HV
Patch status unknown
9.1
CVE-2026-108336
Token Signing Key Allows Unauthenticated Administrative Access
HV
Patch status unknown
9.1
CVE-2026-108335
Password Reset Functionality Missing Brute-Force Protection
HV
Patch status unknown
-
CVE-2022-43769 Actively exploited
Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
HV
Workaround Public Exploits:2EPSS %98
-
CVE-2022-43939 Actively exploited
Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
HV
Workaround Public Exploits:2EPSS %92