Login Request a demo
SP
Product
Spagobi
by Eng · last CVE Jan 21, 2025
8
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 2Medium 2Low 0
Severity
All severities8Critical1High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Spagobi to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-54794
9.1
13%
Jan 21
The script input feature of SpagoBI 3.5.1 allows arbitrary code execution
Affected: 3.5.1
CVE-2013-6231
8.8
10%
Jan 10
SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script
Affected: before 4.1
CVE-2013-6234
8.0
7%
Nov 22
Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an…
Affected: before 4.1
CVE-2024-54792
6.1
0%
Jan 21
A Cross-Site Request Forgery (CSRF) vulnerability has been found in SpagoBI v3.5.1 in the user administration panel
Affected: 3.5.1
CVE-2024-54795
5.4
1%
Jan 21
SpagoBI v3.5.1 contains multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the create/edit forms of the worksheet designer function
Affected: 3.5.1
CVE-2014-7296
–
2%
Oct 8
The default configuration in the accessibility engine in SpagoBI 5.0.0 does not set FEATURE_SECURE_PROCESSING, which allows remote authenticated users to execute arbitrary Java…
Affected: 5.0
CVE-2013-6233
–
3%
Mar 9
Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field in the "Short…
Affected: through 4.0
CVE-2013-6232
–
4%
Mar 9
Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via a document note in the execution page
Affected: through 4.0
Showing 8