Eng Knowage vulnerabilities

• eng knowage, knowagelabs knowage-server +1 more Knowage is vulnerable to blind server-side request forgery (SSRF) CVE-2025-58441 6.3 MediumJanuary 7, 2026
• eng knowage, knowagelabs knowage-server +1 more Knowage Contains a Remote Code Execution Vulnerability CVE-2025-59954 9.3 CriticalSeptember 29, 2025
• eng knowage, knowagelabs knowage-server +1 more Knowage vulnerable to server-side request forgery CVE-2025-55007 3.5 LowSeptember 1, 2025
• eng knowage DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before 8.1.30... CVE-2024-57971 9.1 CriticalFebruary 16, 2025
• eng knowage, knowagelabs knowage-server +1 more Knowage Server vulnerable to path traversal via upload functionality CVE-2023-38702 10.0 CriticalAugust 4, 2023
• eng knowage, knowagelabs knowage-server +1 more Query injection in Knowage server CVE-2023-37472 7.7 HighJuly 14, 2023
• eng knowage, knowagelabs knowage-server +1 more Knowage-Server vulnerable to Path traversal in download functionalities CVE-2023-36819 6.5 MediumJuly 3, 2023
• eng knowage, knowagelabs knowage-server +1 more Knowage-Server vulnerable to account validation bypass CVE-2023-35154 7.2 HighJune 23, 2023
• eng knowage, knowagelabs knowage-server +1 more Improper Neutralization of Alternate XSS Syntax in Knowage-Server CVE-2022-39295 6.1 MediumOctober 13, 2022
• eng knowage Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting (XSS). An... CVE-2021-30213 6.1 MediumMay 12, 2021
• eng knowage Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful... CVE-2021-30214 EPSS 23.8% 5.4 MediumMay 12, 2021
• eng knowage Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). An attacker can inject... CVE-2021-30212 5.4 MediumMay 12, 2021
• eng knowage Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). An attacker can inject... CVE-2021-30211 5.4 MediumMay 12, 2021
• eng knowage A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url... CVE-2021-30055 8.8 HighApril 5, 2021
• eng knowage Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS). An attacker can... CVE-2021-30056 5.4 MediumApril 5, 2021
• eng knowage A stored HTML injection vulnerability exists in Knowage Suite version 7.1. An attacker can inject... CVE-2021-30057 4.8 MediumApril 5, 2021
• eng knowage Knowage Suite before 7.4 is vulnerable to cross-site scripting (XSS). An attacker can inject... CVE-2021-30058 6.1 MediumApril 5, 2021
• eng knowage In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the... CVE-2019-13188 9.8 CriticalSeptember 5, 2019
• eng knowage In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows... CVE-2019-13190 5.3 MediumSeptember 5, 2019
• eng knowage In Knowage through 6.1.1, an authenticated user who accesses the datasources page will gain... CVE-2019-13348 8.8 HighAugust 28, 2019
• eng knowage In Knowage through 6.1.1, there is XSS via the start_url or user_id field to the ChangePwdServlet... CVE-2019-13189 6.1 MediumAugust 28, 2019
• eng knowage Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name or description field to the "Olap... CVE-2018-12355 6.1 MediumJune 13, 2018