288 matches found
Knowage Suite 7.3 - Cross-Site Scripting
Knowage Suite 7.3 contains an unauthenticated reflected cross-site scripting vulnerability. An attacker can inject arbitrary web script in '/servlet/AdapterHTTP' via the 'targetService' parameter. id: CVE-2021-30213 info: name: Knowage Suite 7.3 - Cross-Site Scripting author: alph4byt3 severity:...
Knowage Suite 7.3 - Cross-Site Scripting Detection
Knowage Suite 7.3 contains an unauthenticated reflected cross-site scripting vulnerability. An attacker can inject arbitrary web script in '/servlet/AdapterHTTP' via the 'targetService' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Knowage Suite 7.""" from kittysploit import from...
graditude (0.1.0), jwql (>=0.23.0, <=0.24.0) +2 more potentially affected by CVE-2026-21883 via bokeh (1.3.4)
bokeh PYPI version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - graditude 0.1.0 - jwql =0.23.0, =1.0.0, =0.31.14, =0.31.37 Source cves: CVE-2026-21883 Source advisory: OSV:PYSEC-2026-1223...
chartify (>=3.0.4, <=3.1.0), choochoo (>=0.37.0, <=0.38.1) +18 more potentially affected by CVE-2026-21883 via bokeh (2.2.3)
bokeh PYPI version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - chartify =3.0.4, =0.37.0, =1.0.1a1, =0.1.11, =1.0.0, =0.0.1, =4.3.1, =0.16.0, =0.0.2, =0.0.8, =1.5.1, =0.17.3rc6, =2.0.1, =2.7.7 and more Source cves:...
CVE-2025-58441
Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, there is a blind server-side request forgery vulnerability. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact o...
CVE-2025-58441
Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, there is a blind server-side request forgery vulnerability. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact o...
CVE-2025-58441 Knowage is vulnerable to blind server-side request forgery (SSRF)
Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, there is a blind server-side request forgery vulnerability. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact o...
CVE-2025-58441 Knowage is vulnerable to blind server-side request forgery (SSRF)
Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, there is a blind server-side request forgery vulnerability. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact o...
CVE-2025-58441
Knowage (open source analytics/BI suite) prior to version 8.1.37 is affected by a blind server-side request forgery (SSRF). The issue allows an attacker to send requests to arbitrary hosts/paths, but cannot read responses, limiting direct impact. However, it could be used to scan internal network...
CVE-2025-58441 Knowage is vulnerable to blind server-side request forgery (SSRF)
Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, there is a blind server-side request forgery vulnerability. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact o...
EUVD-2025-206264
Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, there is a blind server-side request forgery vulnerability. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact o...
PT-2026-1820
Name of the Vulnerable Software and Affected Versions Knowage versions prior to 8.1.37 Description Knowage is an analytics and business intelligence suite. Versions prior to 8.1.37 contain a blind server-side request forgery issue. This allows attackers to send requests to arbitrary hosts and...
Knowage code issues and vulnerabilities
Knowage is an open source suite for modern business analytics on legacy resources and big data systems from Knowage, Italy. A code issue vulnerability exists in Knowage versions prior to 8.1.37, which stems from the presence of blind server-side request forgery that could lead an attacker to scan...
CVE-2025-58441: Server-Side Request Forgery (SSRF)
Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, there is a blind server-side request forgery vulnerability. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact o...
org.apache.commons.jxpath.JXPathContext Code Execution
The vulnerability of the org.apache.commons.jxpath.JXPathContext component in the Knowage business analytics and data analysis platform is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
EUVD-2018-4329
Malware in sbrugna...
EUVD-2021-17146
Malware in sbrugna...
EUVD-2021-17145
Malware in sbrugna...