Vulnerabilities
4 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2019-14278 +1 in the same advisory: …13349 | In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page. In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page. NVD description · AI analysis pending | 5.3 group max | 1% |
| — | ||
| CVE-2018-12354 +1 in the same advisory: …12353 | Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST request. Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST request. NVD description · AI analysis pending | 8.8 group max | <1% |
| — |