{"metadata": {"vulnerability": "CVE-2022-43769", "count": 55, "kinds": {"milestone": 4, "sighting": 26, "kev": 11, "other": 14}, "linked_omitted": 0}, "data": [{"timestamp": "2022-10-26T12:55:14.326Z", "date_only": false, "value": "2022-10-26T12:55:14.326Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-43769", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-04-03T17:47:45.737Z", "date_only": false, "value": "2023-04-03T17:47:45.737Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-43769", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-03T18:15:00Z", "date_only": false, "value": "2023-04-03T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WC6X-GMP9-8P34", "record": "GHSA-WC6X-GMP9-8P34", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-04-03T18:15:00Z", "date_only": false, "value": "2023-04-03T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-43769", "record": "GSD-2022-43769", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-04-03T18:15:07.703Z", "date_only": false, "value": "2023-04-03T18:15:07.703", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-43769", "record": "FKIE_CVE-2022-43769", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-03T18:32:05Z", "date_only": false, "value": "2023-04-03T18:32:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WC6X-GMP9-8P34", "record": "GHSA-WC6X-GMP9-8P34", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-03T22:25:06Z", "date_only": false, "value": "2023-04-03T22:25:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/61355", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "b32e2318-9f3a-4560-88d2-e6dfcf7a30a7", "content": "\u203c CVE-2022-43769 \u203c\n\nHitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/61355"}, {"timestamp": "2023-04-08T20:04:44Z", "date_only": false, "value": "2023-04-08T20:04:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8078", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "142adb75-eb30-4832-80ea-5664611b43c6", "content": "#exploit\n1. CVE-2022-43769, CVE-2022-43939, \nCVE-2022-43773, CVE-2022-43938:\nPentah0wnage: Pre-Auth RCE in Pentaho Business Analytics Server\nhttps://research.aurainfosec.io/pentest/pentah0wnage\n\n2. CVE-2022-44675:\nWindows bluetooth vulnerability exploit\nhttps://vul.360.net/archives/690\n\n3. CVE-2023-29017:\nVM2 Sandbox Escape] Vulnerability\nhttps://gist.github.com/seongil-wi/2a44e082001b959bfe304b62121fb76d", "url": "https://t.me/CyberSecurityTechnologies/8078", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-11T14:42:41Z", "date_only": false, "value": "2023-05-11T14:42:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/pentaho_business_server_authbypass_and_ssti.rb", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "f883f5ad-23cb-4811-b3c9-f4470d44f469", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/pentaho_business_server_authbypass_and_ssti.rb"}, {"timestamp": "2023-05-11T17:06:43.739Z", "date_only": false, "value": "2023-05-11T17:06:43.739Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / HITVAN", "record": "CVE-2022-43769", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-05-11T18:15:00Z", "date_only": false, "value": "2023-05-11T18:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-43769", "record": "GSD-2022-43769", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-12-13T01:19:31.588Z", "date_only": false, "value": "2023-12-13T01:19:31.588808Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-43769", "record": "GSD-2022-43769", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-03T13:40:06.548Z", "date_only": false, "value": "2024-08-03T13:40:06.548Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-43769", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "cf02fc1e-6a5e-4650-922f-64995c91b4c0"}, {"timestamp": "2025-02-23T04:10:49Z", "date_only": false, "value": "2025-02-23T04:10:49.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "c9af0cb5-f1b6-47e6-8ee5-c7d6bf9ac95e"}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-43769", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1c42a44c-4cfe-4ef7-a19b-7fd8175999b3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-43769", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5a81af0c-7275-45c8-9e25-d289d08ba58f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": true, "value": "2025-03-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-43769", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-43769", "field": "evidence.0.details.added_date", "uuid": "5a81af0c-7275-45c8-9e25-d289d08ba58f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": true, "value": "2025-03-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-43769", "field": "evidence.0.details.date_added", "uuid": "1c42a44c-4cfe-4ef7-a19b-7fd8175999b3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-43769", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1c42a44c-4cfe-4ef7-a19b-7fd8175999b3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-43769", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5a81af0c-7275-45c8-9e25-d289d08ba58f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-43769", "field": "status.status_updated_at", "uuid": "1c42a44c-4cfe-4ef7-a19b-7fd8175999b3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-43769", "field": "status.status_updated_at", "uuid": "5a81af0c-7275-45c8-9e25-d289d08ba58f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-43769", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2022-43769 added to CISA KEV"}, {"timestamp": "2025-03-03T15:58:09.158Z", "date_only": false, "value": "2025-03-03T15:58:09.158240Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3472166", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "6b4bbb04-58c1-4595-a6d5-dd3f064a213a", "url": "https://feedsin.space/feed/CISAKevBot/items/3472166"}, {"timestamp": "2025-03-03T18:10:04Z", "date_only": false, "value": "2025-03-03T18:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "e8556b32-a948-4aa2-a58c-613072de2f53"}, {"timestamp": "2025-03-03T20:12:14.774Z", "date_only": false, "value": "2025-03-03T20:12:14.774536Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-43769", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-03T20:12:14.774Z", "date_only": false, "value": "2025-03-03T20:12:14.774536Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-43769", "record": "FKIE_CVE-2022-43769", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-03-03T20:30:48Z", "date_only": false, "value": "2025-03-03T20:30:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6282", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "e21303d2-4a1a-43e3-8776-63807685f8e6", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43769\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream.\n\ud83d\udccf Published: 2023-04-03T17:47:45.737Z\n\ud83d\udccf Modified: 2025-03-03T20:14:14.063Z\n\ud83d\udd17 References:\n1. https://support.pentaho.com/hc/en-us/articles/14455561548301--Resolved-Pentaho-BA-Server-Failure-to-Sanitize-Special-Elements-into-a-Different-Plane-Special-Element-Injection-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43769-\n2. http://packetstormsecurity.com/files/172296/Pentaho-Business-Server-Authentication-Bypass-SSTI-Code-Execution.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/6282", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-04T09:43:00.021Z", "date_only": false, "value": "2025-03-04T09:43:00.021985Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3ljk6glxxni27", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "46e3d678-325c-4ea9-8b76-703c28c70932", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3ljk6glxxni27"}, {"timestamp": "2025-03-04T09:44:36.662Z", "date_only": false, "value": "2025-03-04T09:44:36.662226Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljk643vbstc2", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "c156511b-4857-4a8d-a142-4edf02197d65", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljk643vbstc2"}, {"timestamp": "2025-03-04T12:47:40.452Z", "date_only": false, "value": "2025-03-04T12:47:40.452751Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljkimniygqp2", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "34744873-332a-4bd5-a943-098b74818887", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljkimniygqp2"}, {"timestamp": "2025-03-04T21:02:02.602Z", "date_only": false, "value": "2025-03-04T21:02:02.602861Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljleeqwuce25", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "6e5a4cfa-6ccf-4e3d-adac-a633904fbc85", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljleeqwuce25"}, {"timestamp": "2025-03-05T07:27:22.336Z", "date_only": false, "value": "2025-03-05T07:27:22.336912Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljmhbtlcmqq2", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "6b9839b5-7473-4e8f-8848-c3a11c839857", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljmhbtlcmqq2"}, {"timestamp": "2025-03-05T08:25:52.243Z", "date_only": false, "value": "2025-03-05T08:25:52.243483Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljmkj4riezq2", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "c37f6185-3876-4d03-9d95-39aa292fe678", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljmkj4riezq2"}, {"timestamp": "2025-03-05T11:40:32.257Z", "date_only": false, "value": "2025-03-05T11:40:32.257666Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljmvgji7dgf2", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "4d1ba81b-80aa-406b-bcb9-9a5b2c87e053", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljmvgji7dgf2"}, {"timestamp": "2025-03-05T12:38:25.104Z", "date_only": false, "value": "2025-03-05T12:38:25.104733Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljmyozffoaf2", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "50243415-e9c7-45dc-9093-d269901eccda", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljmyozffoaf2"}, {"timestamp": "2025-03-05T16:32:20.209Z", "date_only": false, "value": "2025-03-05T16:32:20.209836Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3ljnfrdwpgs2i", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "3202476e-517e-4416-93ad-a1768d26e4af", "url": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3ljnfrdwpgs2i"}, {"timestamp": "2025-03-06T04:40:21Z", "date_only": false, "value": "2025-03-06T04:40:21.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "7270b3a2-2a72-45c6-a5b7-f62a8ddf503e"}, {"timestamp": "2025-03-06T05:56:27.774Z", "date_only": false, "value": "2025-03-06T05:56:27.774200Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljospadyyra2", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "937d897a-e5f2-42b2-8cee-7bc8a8e43995", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljospadyyra2"}, {"timestamp": "2025-03-06T11:17:54.225Z", "date_only": false, "value": "2025-03-06T11:17:54.225602Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljpe33kttzd2", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "3af2532b-b477-45b9-aaeb-7224d5b4439e", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljpe33kttzd2"}, {"timestamp": "2025-03-06T13:07:53.838Z", "date_only": false, "value": "2025-03-06T13:07:53.838684Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljpk72jkgfr2", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "61f3cdff-417a-467a-8f83-4ae541458a87", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljpk72jkgfr2"}, {"timestamp": "2025-03-07T08:24:05.251Z", "date_only": false, "value": "2025-03-07T08:24:05.251144Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljrlfzxtxoz2", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "d2b48adb-3073-437e-8113-43f54adf3782", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljrlfzxtxoz2"}, {"timestamp": "2025-03-24T00:00:00Z", "date_only": true, "value": "2025-03-24", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-43769", "field": "evidence.0.details.due_date", "uuid": "1c42a44c-4cfe-4ef7-a19b-7fd8175999b3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-21T23:15:21.447Z", "date_only": false, "value": "2025-10-21T23:15:21.447Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-43769", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:21.447Z", "date_only": false, "value": "2025-10-21T23:15:21.447Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-43769", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:43Z", "date_only": false, "value": "2025-10-22T00:32:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WC6X-GMP9-8P34", "record": "GHSA-WC6X-GMP9-8P34", "field": "modified", "linked_record": true}, {"timestamp": "2025-10-23T21:13:00Z", "date_only": false, "value": "2025-10-23T21:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "decc1f41-72f4-41d2-889a-e6b95afe9e47"}, {"timestamp": "2026-02-02T12:26:10.875Z", "date_only": false, "value": "2026-02-02T12:26:10.875641Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1c42a44c-4cfe-4ef7-a19b-7fd8175999b3", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "5565aaa8-7089-4634-acda-ea969922f921", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1c42a44c-4cfe-4ef7-a19b-7fd8175999b3", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T05:07:17.553Z", "date_only": false, "value": "2026-06-17T05:07:17.553", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-43769", "record": "FKIE_CVE-2022-43769", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:26.011Z", "date_only": false, "value": "2026-06-19T12:46:26.011781Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/44bb85e3-a5bb-4907-846a-d4fc25514b88", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "a6c2b136-1a05-4707-abec-898256e72868", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/44bb85e3-a5bb-4907-846a-d4fc25514b88", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-43769", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "5a81af0c-7275-45c8-9e25-d289d08ba58f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:06:05.839Z", "date_only": false, "value": "2026-06-23T14:06:05.839528Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5a81af0c-7275-45c8-9e25-d289d08ba58f", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "c95b454f-a5cf-4b6c-b572-52c7087c0355", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5a81af0c-7275-45c8-9e25-d289d08ba58f", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-43769", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "1c42a44c-4cfe-4ef7-a19b-7fd8175999b3", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-12T04:49:27.663Z", "anchors": {"origin": {"timestamp": "2023-04-03T17:47:45.737Z", "date_only": false, "value": "2023-04-03T17:47:45.737Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-43769", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-04-03T17:47:45.737Z", "date_only": false, "value": "2023-04-03T17:47:45.737Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-43769", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-04-08T20:04:44Z", "date_only": false, "value": "2023-04-08T20:04:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8078", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "142adb75-eb30-4832-80ea-5664611b43c6", "content": "#exploit\n1. CVE-2022-43769, CVE-2022-43939, \nCVE-2022-43773, CVE-2022-43938:\nPentah0wnage: Pre-Auth RCE in Pentaho Business Analytics Server\nhttps://research.aurainfosec.io/pentest/pentah0wnage\n\n2. CVE-2022-44675:\nWindows bluetooth vulnerability exploit\nhttps://vul.360.net/archives/690\n\n3. CVE-2023-29017:\nVM2 Sandbox Escape] Vulnerability\nhttps://gist.github.com/seongil-wi/2a44e082001b959bfe304b62121fb76d", "url": "https://t.me/CyberSecurityTechnologies/8078", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-43769", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1c42a44c-4cfe-4ef7-a19b-7fd8175999b3", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 60415934.263, "hours": 16782.203961944444, "days": 699.2584984143518, "min_seconds": 60415934.263, "max_seconds": 60502334.263, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-03T17:47:45.737Z", "date_only": false, "value": "2023-04-03T17:47:45.737Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-43769", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-43769", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1c42a44c-4cfe-4ef7-a19b-7fd8175999b3", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 60415934.263, "hours": 16782.203961944444, "days": 699.2584984143518, "min_seconds": 60415934.263, "max_seconds": 60502334.263, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-03T17:47:45.737Z", "date_only": false, "value": "2023-04-03T17:47:45.737Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-43769", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-43769", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1c42a44c-4cfe-4ef7-a19b-7fd8175999b3", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 440218.263, "hours": 122.28285083333333, "days": 5.095118784722222, "min_seconds": 440218.263, "max_seconds": 440218.263, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-03T17:47:45.737Z", "date_only": false, "value": "2023-04-03T17:47:45.737Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-43769", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-04-08T20:04:44Z", "date_only": false, "value": "2023-04-08T20:04:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8078", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "142adb75-eb30-4832-80ea-5664611b43c6", "content": "#exploit\n1. CVE-2022-43769, CVE-2022-43939, \nCVE-2022-43773, CVE-2022-43938:\nPentah0wnage: Pre-Auth RCE in Pentaho Business Analytics Server\nhttps://research.aurainfosec.io/pentest/pentah0wnage\n\n2. CVE-2022-44675:\nWindows bluetooth vulnerability exploit\nhttps://vul.360.net/archives/690\n\n3. CVE-2023-29017:\nVM2 Sandbox Escape] Vulnerability\nhttps://gist.github.com/seongil-wi/2a44e082001b959bfe304b62121fb76d", "url": "https://t.me/CyberSecurityTechnologies/8078", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 113914901.926667, "hours": 31643.028312963055, "days": 1318.4595130401274, "min_seconds": 113914901.926667, "max_seconds": 113914901.926667, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-03T17:47:45.737Z", "date_only": false, "value": "2023-04-03T17:47:45.737Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-43769", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T04:49:27.663Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 53498967.663667, "hours": 14860.824351018611, "days": 619.2010146257754, "min_seconds": 53412567.663667, "max_seconds": 53498967.663667, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-43769", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1c42a44c-4cfe-4ef7-a19b-7fd8175999b3", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-12T04:49:27.663Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 113474683.663667, "hours": 31520.745462129722, "days": 1313.364394255405, "min_seconds": 113474683.663667, "max_seconds": 113474683.663667, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-08T20:04:44Z", "date_only": false, "value": "2023-04-08T20:04:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8078", "record": "CVE-2022-43769", "field": "creation_timestamp", "uuid": "142adb75-eb30-4832-80ea-5664611b43c6", "content": "#exploit\n1. CVE-2022-43769, CVE-2022-43939, \nCVE-2022-43773, CVE-2022-43938:\nPentah0wnage: Pre-Auth RCE in Pentaho Business Analytics Server\nhttps://research.aurainfosec.io/pentest/pentah0wnage\n\n2. CVE-2022-44675:\nWindows bluetooth vulnerability exploit\nhttps://vul.360.net/archives/690\n\n3. CVE-2023-29017:\nVM2 Sandbox Escape] Vulnerability\nhttps://gist.github.com/seongil-wi/2a44e082001b959bfe304b62121fb76d", "url": "https://t.me/CyberSecurityTechnologies/8078", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-12T04:49:27.663Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}