CVE-2016-10701

Published: Nov 28, 2017 Last Modified: Apr 20, 2025 EU-VD ID: EUVD-2016-1702 Aliases: GSD-2016-10701

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 8,8

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: required

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: high

MEDIUM 6,8

Source: [email protected]

Access Vector: network

Access Complexity: medium

Authentication: none

Confidentiality: partial

Integrity: partial

Availability: partial

Description

AI Translation Available

In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score

0,0014

Percentile

0,3th

Updated

EPSS Score Trend (Last 90 Days)

352

Cross-Site Request Forgery (CSRF)

Stable

Abstraction: Compound Structure: Composite

Common Consequences

Security Scopes Affected:

Confidentiality Integrity Availability Non-Repudiation Access Control

Potential Impacts:

Gain Privileges Or Assume Identity Bypass Protection Mechanism Read Application Data Modify Application Data Dos: Crash, Exit, Or Restart

Applicable Platforms

Technologies: Web Based, Web Server

Likelihood of Exploit: Medium

View CWE Details

Application

Pentaho Business Analytics by Hitachivantara

Product Information

Vendor Hitachivantara

Product Pentaho Business Analytics

Version Range Affected

To 8.0 (inclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:hitachivantara:pentaho_business_analytics:*:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

http://jira.pentaho.com/browse/BISERVER-13207