High severity8.8NVD Advisory· Published Apr 3, 2023· Updated Jun 17, 2026

CVE-2022-43773

Description

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x is installed with a sample HSQLDB data source configured with stored procedures enabled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Hitachi/Pentaho Business Analyticsllm-fuzzy2 versions
<9.4.0.1, <9.3.0.2, 8.3.x+ 1 more
- (no CPE)range: <9.4.0.1, <9.3.0.2, 8.3.x
- (no CPE)range: 1.0
Pentaho/Business Analyticsllm-fuzzy
Range: <9.4.0.1, <9.3.0.2, 8.3.x

Patches

Vulnerability mechanics

References

support.pentaho.com/hc/en-us/articles/14453135249165--Resolved-Pentaho-BA-Server-Incorrect-Permission-Assignment-for-Critical-Resource-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43773-nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.018
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000