Security Updates
- ★ log4j 1 and log4j 2 vulnerabilities found in Pentaho and Lumada Software Resolved
- ★ "Critical Flaws Uncovered in Pentaho" article - Known issues explained
- IMPORTANT: (Resolved) Pentaho BA Server Directory Listing - Versions before 9.3.0.0, 9.2.0.2 and 8.3.0.25 Impacted (CVE-2021-45446)
- IMPORTANT: (Resolved) Pentaho BA Server Data Lineage - Versions before 9.3.0.0, 9.2.0.2 and 8.3.0.25 Impacted (CVE-2021-45447)
- IMPORTANT: (Resolved) Pentaho BA Server Analyzer Plugin - Versions before 9.3.0.0, 9.2.0.2 and 8.3.0.25 Impacted (CVE-2021-45448)
- SolarWinds® Orion® Platform Vulnerability
- hirt-sec-2020-601 : Multiple Vulnerabilities in Pentaho
- VFS Connections Vulnerability - Pentaho 9.0.0.0 – 9.0.0.6 Impacted
- Ripple20 Vulnerability, August 2020 – Pentaho Not Impacted
- Tomcat 8.5.50 Vulnerability, April 2020 - Pentaho Impacted
- Apache Struts Vulnerability, April 2017 - Pentaho not Impacted