Medium severity4.3NVD Advisory· Published Apr 3, 2023· Updated Jun 17, 2026

CVE-2022-4769

Description

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the target path on host when a file is uploaded with an invalid character in its name.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Hitachi/Pentaho Business Analyticsllm-fuzzy2 versions
<9.4.0.0 and <9.3.0.2, including 8.3.x+ 1 more
- (no CPE)range: <9.4.0.0 and <9.3.0.2, including 8.3.x
- (no CPE)range: 1.0
Pentaho/Business Analyticsllm-fuzzy
Range: <9.4.0.0 and <9.3.0.2, including 8.3.x

Patches

Vulnerability mechanics

References

support.pentaho.com/hc/en-us/articles/14452244712589--Resolved-Pentaho-BA-Server-Generation-of-Error-Message-Containing-Sensitive-Information-Versions-before-9-4-0-0-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-4769-nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000