CVE-2025-11159
CRITICAL NVDCVSS Score
9.1
Severity
CRITICAL
Source
NVD
Published
May 13, 2026
Description
Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new connection is created by a data source administrator.