[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJDX92nunPzW58Uoo5dm4N9ugUQNjxK8gRoD10AyT-_s":3,"g5a-risk:CVE-2021-31599":123},{"success":4,"data":5,"meta":121},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":26,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":56,"references":57,"referencesCount":56,"weaknesses":70,"weaknessesCount":79,"isActivelyExploited":80,"cisaInfo":26,"otxData":26,"relatedBlogPosts":81,"seoMetadata":82,"configurations":107,"relatedVendorCves":119,"notableEvents":120},"CVE-2021-31599","What is CVE-2021-31599?","An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. A reports (.prpt) file allows the inclusion of BeanShell scripts to ease the production of complex reports. An authenticated user can run arbitrary code.","An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. A reports (.prpt) file allows the inclus...","2021-11-08T04:15:08.107","2021-11-09T21:20:33.097",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":33,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"cve@mitre.org","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[34],{"Source":17,"Type":18,"CVSSData":35,"BaseSeverity":41,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":36,"VectorString":37,"AccessVector":21,"AccessComplexity":22,"Authentication":38,"ConfidentialityImpact":39,"IntegrityImpact":39,"AvailabilityImpact":39,"BaseScore":40,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.0234,[44,44,44,44,44,44,44],"High",[48,53],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"hitachi","vantara_pentaho","*","cpe:2.3:a:hitachi:vantara_pentaho:*:*:*:*:*:*:*:*",{"vendor":49,"product":54,"version":51,"criteria":55,"vulnerable":4},"vantara_pentaho_business_intelligence_server","cpe:2.3:a:hitachi:vantara_pentaho_business_intelligence_server:*:*:*:*:*:*:*:*",2,[58,65],{"url":59,"source":60,"tags":61},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F164772\u002FPentaho-Business-Analytics-Pentaho-Business-Server-9.1-Remote-Code-Execution.html","Packetstormsecurity",[62,63,64],"Exploit","Third Party Advisory","VDB Entry",{"url":66,"source":67,"tags":68},"https:\u002F\u002Fwww.hitachi.com\u002Fhirt\u002Fsecurity\u002Findex.html","Hitachi",[69],"Vendor Advisory",[71],{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":77,"structure":78},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",1,false,[],{"title":83,"metaDescription":84,"keywords":85,"canonicalUrl":86,"structuredData":87},"What is CVE-2021-31599? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-31599, a high severity cyber security vulnerability from 2021. An issue was discovered in Hitachi Vantara Pentaho through ...","CVE-2021-31599, CVE-2021-31599 vulnerability, CVE-2021-31599 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, hitachi security, vantara_pentaho vulnerability, vantara_pentaho_business_intelligence_server vulnerability","\u002Fwhat-is\u002Fcve-2021-31599",{"@context":88,"@type":89,"headline":83,"description":84,"datePublished":10,"dateModified":11,"author":90,"publisher":94,"about":98,"mainEntityOfPage":102,"articleSection":105,"keywords":106},"https:\u002F\u002Fschema.org","TechArticle",{"@type":91,"name":92,"url":93},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":91,"name":92,"url":93,"logo":95},{"@type":96,"url":97},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":99,"name":6,"description":100,"additionalType":101},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":103,"@id":104},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-31599","Cybersecurity","CVE-2021-31599, CVE-2021-31599 vulnerability, CVE-2021-31599 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[108],{"Operator":26,"Negate":26,"Nodes":109},[110],{"Operator":111,"Negate":26,"CPEMatch":112},"OR",[113,116],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":114,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":115},"112246CB-127C-4D03-BAC5-42F0DE0F6D79","9.1.0.0",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":118},"A3D06176-C7C1-476D-B142-4CCD4074DC0E","7.1",[],[],{"lastModified":11,"cacheTime":122,"version":36},1792360129317,{"score":124,"band":125,"action":126,"scoredAt":127},57,"Medium","Plan remediation","2026-10-16T06:52:26.527399+00:00"]