Eng vulnerabilities

Products

• Knowage 22
• Spagobi 8

Newest

• eng knowage, knowagelabs knowage-server +1 more Knowage is vulnerable to blind server-side request forgery (SSRF) CVE-2025-58441 6.3 MediumJanuary 7, 2026
• eng knowage, knowagelabs knowage-server +1 more Knowage Contains a Remote Code Execution Vulnerability CVE-2025-59954 9.3 CriticalSeptember 29, 2025
• eng knowage, knowagelabs knowage-server +1 more Knowage vulnerable to server-side request forgery CVE-2025-55007 3.5 LowSeptember 1, 2025
• eng knowage DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before 8.1.30... CVE-2024-57971 9.1 CriticalFebruary 16, 2025
• eng spagobi SpagoBI v3.5.1 contains multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the create... CVE-2024-54795 5.4 MediumJanuary 21, 2025
• eng spagobi The script input feature of SpagoBI 3.5.1 allows arbitrary code execution. CVE-2024-54794 EPSS 13.2% 9.1 CriticalJanuary 21, 2025
• eng spagobi A Cross-Site Request Forgery (CSRF) vulnerability has been found in SpagoBI v3.5.1 in the user... CVE-2024-54792 6.1 MediumJanuary 21, 2025
• eng knowage, knowagelabs knowage-server +1 more Knowage Server vulnerable to path traversal via upload functionality CVE-2023-38702 10.0 CriticalAugust 4, 2023
• eng knowage, knowagelabs knowage-server +1 more Query injection in Knowage server CVE-2023-37472 7.7 HighJuly 14, 2023
• eng knowage, knowagelabs knowage-server +1 more Knowage-Server vulnerable to Path traversal in download functionalities CVE-2023-36819 6.5 MediumJuly 3, 2023
• eng knowage, knowagelabs knowage-server +1 more Knowage-Server vulnerable to account validation bypass CVE-2023-35154 7.2 HighJune 23, 2023
• eng knowage, knowagelabs knowage-server +1 more Improper Neutralization of Alternate XSS Syntax in Knowage-Server CVE-2022-39295 6.1 MediumOctober 13, 2022
• eng knowage Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting (XSS). An... CVE-2021-30213 6.1 MediumMay 12, 2021
• eng knowage Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful... CVE-2021-30214 EPSS 23.8% 5.4 MediumMay 12, 2021
• eng knowage Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). An attacker can inject... CVE-2021-30212 5.4 MediumMay 12, 2021
• eng knowage Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). An attacker can inject... CVE-2021-30211 5.4 MediumMay 12, 2021
• eng knowage A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url... CVE-2021-30055 8.8 HighApril 5, 2021
• eng knowage Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS). An attacker can... CVE-2021-30056 5.4 MediumApril 5, 2021
• eng knowage A stored HTML injection vulnerability exists in Knowage Suite version 7.1. An attacker can inject... CVE-2021-30057 4.8 MediumApril 5, 2021
• eng knowage Knowage Suite before 7.4 is vulnerable to cross-site scripting (XSS). An attacker can inject... CVE-2021-30058 6.1 MediumApril 5, 2021
• eng spagobi SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script CVE-2013-6231 Public exploit 8.8 HighJanuary 10, 2020
• eng spagobi Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows... CVE-2013-6234 Public exploit 8.0 HighNovember 22, 2019
• eng knowage In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the... CVE-2019-13188 9.8 CriticalSeptember 5, 2019
• eng knowage In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows... CVE-2019-13190 5.3 MediumSeptember 5, 2019
• eng knowage In Knowage through 6.1.1, an authenticated user who accesses the datasources page will gain... CVE-2019-13348 8.8 HighAugust 28, 2019
• eng knowage In Knowage through 6.1.1, there is XSS via the start_url or user_id field to the ChangePwdServlet... CVE-2019-13189 6.1 MediumAugust 28, 2019
• eng knowage Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name or description field to the "Olap... CVE-2018-12355 6.1 MediumJune 13, 2018
• eng spagobi The default configuration in the accessibility engine in SpagoBI 5.0.0 does not set... CVE-2014-7296 6.8 MediumOctober 8, 2014
• eng spagobi Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users... CVE-2013-6233 Public exploit 4.3 MediumMarch 7, 2014
• eng spagobi Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users... CVE-2013-6232 Public exploit 3.5 LowMarch 7, 2014