CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

OSV•added 2021/04/05 11:15 a.m.•25 views

CVE-2021-30057

A stored HTML injection vulnerability exists in Knowage Suite version 7.1. An attacker can inject arbitrary HTML in "/restful-services/2.0/analyticalDrivers" via the 'LABEL' and 'NAME' parameters...

4.8CVSS6.8AI score

SaveExploits0References1

Prion•added 2021/04/05 11:15 a.m.•26 views

Design/Logic Flaw

A stored HTML injection vulnerability exists in Knowage Suite version 7.1. An attacker can inject arbitrary HTML in "/restful-services/2.0/analyticalDrivers" via the 'LABEL' and 'NAME' parameters...

3.5CVSS5.3AI score0.0066EPSS

SaveExploits1References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2021/04/05 12:00 a.m.•6 views

CVE-2021-30057: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A stored HTML injection vulnerability exists in Knowage Suite version 7.1. An attacker can inject arbitrary HTML in "/restful-services/2.0/analyticalDrivers" via the 'LABEL' and 'NAME' parameters...

4.8CVSS5.9AI score0.0066EPSS

SaveExploits1References2

Cvelist•added 2018/06/13 11:00 p.m.•32 views

CVE-2018-12354

Knowage formerly SpagoBI 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST request...

8.7AI score0.0046EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2018/06/13 12:00 a.m.•2 views

CVE-2018-12354: Cross-Site Request Forgery (CSRF)

Knowage formerly SpagoBI 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST request...

8.8CVSS7.8AI score0.0046EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by