Knowage-suite
Knowage-suite Knowage: vulnerabilidades y CVE
Knowage-suite Knowage tiene 4 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2019-14278 | Media (5.3) | 1.2% | — | 5 sept 2019 | In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page. |
| CVE-2019-13349 | Media (4.9) | 1.3% | — | 5 sept 2019 | In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes. |
| CVE-2018-12354 | Alta (8.8) | 0.46% | — | 13 jun 2018 | Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST request. |
| CVE-2018-12353 | Media (6.1) | 0.65% | — | 13 jun 2018 | Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name field to the "Business Model's Catalogue" catalogue. |