EN
Vendor
eng
30
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-58441 | KN Knowage Eng | 6.5 | Jan 7 | Knowage is vulnerable to blind server-side request forgery (SSRF) |
| CVE-2025-59954 | KN Knowage Eng | 9.8 | Sep 29 | Knowage Contains a Remote Code Execution Vulnerability |
| CVE-2025-55007 | KN Knowage Eng | 5.3 | Sep 1 | Knowage vulnerable to server-side request forgery |
| CVE-2024-57971 | KN KNOWAGE eng | 9.1 | Feb 16 | DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before 8.1.30 does not ensure that java:comp/env/jdbc/ occurs at the beginning of a JNDI Name |
| CVE-2024-54792 | SP Spagobi Eng | 6.1 | Jan 21 | A Cross-Site Request Forgery (CSRF) vulnerability has been found in SpagoBI v3.5.1 in the user administration panel |
| CVE-2024-54795 | SP Spagobi Eng | 5.4 | Jan 21 | SpagoBI v3.5.1 contains multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the create/edit forms of the worksheet designer function |
| CVE-2024-54794 | SP Spagobi Eng | 9.1 | Jan 21 | The script input feature of SpagoBI 3.5.1 allows arbitrary code execution |
| CVE-2023-38702 | KN Knowage Eng | 8.8 | Aug 4 | Knowage is an open source analytics and business intelligence suite |
| CVE-2023-37472 | KN Knowage Eng | 6.5 | Jul 14 | Knowage is an open source suite for business analytics |
| CVE-2023-36819 | KN Knowage Eng | 6.5 | Jul 3 | Knowage is the professional open source suite for modern business analytics over traditional sources and big data systems |
| CVE-2023-35154 | KN Knowage Eng | 6.5 | Jun 23 | Knowage is an open source analytics and business intelligence suite |
| CVE-2022-39295 | KN Knowage Eng | 6.1 | Oct 13 | Improper Neutralization of Alternate XSS Syntax in Knowage-Server |
| CVE-2021-30214 | KN Knowage Eng | 5.4 | May 12 | Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter |
| CVE-2021-30213 | KN Knowage Eng | 6.1 | May 12 | Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting (XSS) |
| CVE-2021-30212 | KN Knowage Eng | 5.4 | May 12 | Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS) |
| CVE-2021-30211 | KN Knowage Eng | 5.4 | May 12 | Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS) |
| CVE-2021-30058 | KN Knowage Eng | 6.1 | Apr 5 | Knowage Suite before 7.4 is vulnerable to cross-site scripting (XSS) |
| CVE-2021-30057 | KN Knowage Eng | 4.8 | Apr 5 | A stored HTML injection vulnerability exists in Knowage Suite version 7.1 |
| CVE-2021-30056 | KN Knowage Eng | 5.4 | Apr 5 | Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS) |
| CVE-2021-30055 | KN Knowage Eng | 8.8 | Apr 5 | A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the 'par_year' parameter when running a report |
| CVE-2013-6231 | SP Spagobi Eng | 8.8 | Jan 10 | SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script |
| CVE-2013-6234 | SP Spagobi Eng | 8.0 | Nov 22 | Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an… |
| CVE-2019-13188 | KN Knowage Eng | 9.8 | Sep 5 | In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application |
| CVE-2019-13190 | KN Knowage Eng | 5.3 | Sep 5 | In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token |
| CVE-2019-13348 | KN Knowage Eng | 8.8 | Aug 28 | In Knowage through 6.1.1, an authenticated user who accesses the datasources page will gain access to any data source credentials in cleartext, which includes databases |
| CVE-2019-13189 | KN Knowage Eng | 6.1 | Aug 28 | In Knowage through 6.1.1, there is XSS via the start_url or user_id field to the ChangePwdServlet page |
| CVE-2018-12355 | KN Knowage Eng | 6.1 | Jun 13 | Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name or description field to the "Olap Schemas' Catalogue" catalogue |
| CVE-2014-7296 | SP Spagobi Eng | – | Oct 8 | The default configuration in the accessibility engine in SpagoBI 5.0.0 does not set FEATURE_SECURE_PROCESSING, which allows remote authenticated users to execute arbitrary Java… |
| CVE-2013-6233 | SP Spagobi Eng | – | Mar 9 | Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field in the "Short… |
| CVE-2013-6232 | SP Spagobi Eng | – | Mar 9 | Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via a document note in the execution page |