CVE-2025-11159
CRITICAL
NVD
CVSS Score
9.1
Severity
CRITICAL
Published
May 13, 2026
Vendor
unknown
Description
Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new connection is created by a data source administrator.