CVE-2020-24665

The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains an XML Entity Expansion injection vulnerability, which allows an authenticated remote users to trigger a denial of service (DoS) condition. Specifically, the vulnerability lies in the 'dashboardXml' parameter. Remediated in >= 7.1.0.25, >= 8.2.0.6, >= 8.3.0.0 GA

• CWE-776

• http://www.hitachi.com/hirt/hitachi-sec/2020/601.htmlVendor Advisory
• https://www.accenture.comNot Applicable
• http://www.hitachi.com/hirt/hitachi-sec/2020/601.htmlVendor Advisory
• https://www.accenture.comNot Applicable

Published

Jan 29, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-24659An issue was discovered in GnuTLS before 3.6.15. A server ca…7.5
• CVE-2020-24660An issue was discovered in LemonLDAP::NG through 2.0.8, when…9.8
• CVE-2020-24661GNOME Geary before 3.36.3 mishandles pinned TLS certificate …5.9
• CVE-2020-24662SmartStream Transaction Lifecycle Management (TLM) Reconcili…5.4
• CVE-2020-24663Trace Financial CRESTBridge <6.3.0.02 contains a stored XSS …5.4
• CVE-2020-24664The dashboard Editor in Hitachi Vantara Pentaho through 7.x …5.4
• CVE-2020-24666The Analysis Report in Hitachi Vantara Pentaho through 7.x -…5.4
• CVE-2020-24667Trace Financial CRESTBridge <6.3.0.02 contains an authentica…8.8
• CVE-2020-24668Trace Financial Crest Bridge <6.3.0.02 contains a stored XSS…5.4
• CVE-2020-24669The New Analysis Report in Hitachi Vantara Pentaho through 7…5.4
• CVE-2020-24670The Dashboard Editor in Hitachi Vantara Pentaho through 7.x …5.4
• CVE-2020-24671Trace Financial CRESTBridge <6.3.0.02 contains an authentica…8.8