Login Request a demo
KN
Product
KNOWAGE
by eng · last CVE Jan 7, 2026
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities22In the news0Timeline
Severity mix
Critical 3High 3Medium 16Low 0
Severity
All severities22Critical3High3Medium16Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add KNOWAGE to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-58441
6.5
0%
Jan 7
Knowage is vulnerable to blind server-side request forgery (SSRF)
Affected: before 8.1.37
CVE-2023-37472
6.5
1%
Jul 14
Query injection in Knowage server
Affected: 6.1.0 before 8.1.8
CVE-2023-36819
6.5
1%
Jul 3
Knowage-Server vulnerable to Path traversal in download functionalities
Affected: 6.0.0 before 8.1.8
CVE-2023-35154
6.5
0%
Jun 23
Knowage-Server vulnerable to account validation bypass
Affected: 6.1.0 before 8.1.8
CVE-2022-39295
6.1
1%
Oct 13
Improper Neutralization of Alternate XSS Syntax in Knowage-Server
Affected: 6.1.0 before 7.4.22; 8.0.0 before 8.0.9
CVE-2021-30213
6.1
3%
May 12
Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting (XSS)
Affected: 7.3.0
CVE-2021-30058
6.1
1%
Apr 5
Knowage Suite before 7.4 is vulnerable to cross-site scripting (XSS)
Affected: before 7.4
CVE-2019-13189
6.1
1%
Aug 28
In Knowage through 6.1.1, there is XSS via the start_url or user_id field to the ChangePwdServlet page
Affected: before 6.4
CVE-2018-12355
6.1
1%
Jun 13
Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name or description field to the "Olap Schemas' Catalogue" catalogue
Affected: 6.1.1
CVE-2021-30214
5.4
24%
May 12
Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter
Affected: 7.3.0
CVE-2021-30212
5.4
1%
May 12
Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS)
Affected: 7.3.0
CVE-2021-30211
5.4
0%
May 12
Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS)
Affected: 7.3.0
CVE-2021-30056
5.4
1%
Apr 5
Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS)
Affected: before 7.4
CVE-2025-55007
5.3
0%
Sep 1
Knowage vulnerable to server-side request forgery
Affected: before 8.1.37
CVE-2019-13190
5.3
1%
Sep 5
In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token
Affected: through 6.1.1
CVE-2021-30057
4.8
1%
Apr 5
A stored HTML injection vulnerability exists in Knowage Suite version 7.1
Affected: before 7.4
Showing 16