---
id: CVE-2025-9122
title: >-
  Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard
  Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the
  full server stack trace when encountering an error within the GetCdfResource
  servlet.
summary: >-
  Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard
  Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the
  full server stack trace when encountering an error within the GetCdfResource
  servlet.
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
cwe:
  - CWE-209
published: '2025-12-15'
updated: '2026-10-07'
sourceUpdated: '2026-10-07T19:10:00.160'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-9122'
references:
  - url: >-
      https://support.pentaho.com/hc/en-us/articles/41833799577741--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Generation-of-Error-Message-Containing-Sensitive-Information-Versions-before-10-2-0-4-Impacted-CVE-2025-9122
    label: security.vulnerabilities@hitachivantara.com
tags:
  - nvd
epss: 0.00285
epssPercentile: 0.19216
ingestedAt: '2026-10-07T19:44:15.694Z'
---

## Overview

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.