CVE-2022-3960

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator to disable scripting capabilities of the Community Dashboard Editor (CDE) plugin.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-96CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Apr 3, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-39616.5The Directorist WordPress plugin before 7.4.4 does not prevent users with low privileges (like subscribers) from accessing sensitive system CVE-2022-39624.3A content spoofing vulnerability was found in Kiali. It was discovered that Kiali does not implement error handling when the page or endpoinCVE-2022-39635.4A vulnerability was found in gnuboard5. It has been classified as problematic. Affected is an unknown function of the file bbs/faq.php of thCVE-2022-39648.1A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the comCVE-2022-39658.1A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smc_encode_stream of the file libavcoCVE-2022-39667.5A vulnerability, which was classified as critical, has been found in Ultimate Member Plugin up to 2.5.0. This issue affects the function loaCVE-2022-39677.8A vulnerability, which was classified as critical, was found in Vesta Control Panel. Affected is an unknown function of the file func/main.sCVE-2022-39686.1A vulnerability has been found in emlog and classified as problematic. Affected by this vulnerability is an unknown functionality of the filCVE-2022-39695.5A vulnerability was found in OpenKM up to 6.3.11 and classified as problematic. Affected by this issue is the function getFileExtension of tCVE-2022-39708.8A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/CVE-2022-39715.6A vulnerability was found in matrix-appservice-irc up to 0.35.1. It has been declared as critical. This vulnerability affects unknown code oCVE-2022-39729.8A vulnerability was found in Pingkon HMS-PHP. It has been rated as critical. This issue affects some unknown processing of the file admin/ad
CVE-2022-3960: Medium severity, CVSS 6.3 | Vulnix