Lucene search
+L

7 matches found

CNVD
CNVD
•added 2021/04/06 12:00 a.m.•19 views

Knowage SQL Injection Vulnerability

Knowage is a suite of open source tools for modern business analytics. A SQL injection vulnerability exists in the documentexecution/url analysis driver component of Knowage prior to version 7.4 when running reports. An attacker can exploit this vulnerability to execute arbitrary SQL commands on ...

8.8CVSS8.3AI score0.01602EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/04/05 11:15 a.m.•27 views

CVE-2021-30055

A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the 'paryear' parameter when running a report...

8.8CVSS7.9AI score0.01602EPSS
SaveExploits1References1
NVD
NVD
•added 2021/04/05 11:15 a.m.•27 views

CVE-2021-30055

A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the 'paryear' parameter when running a report...

8.8CVSS0.01602EPSS
SaveExploits1References1
Prion
Prion
•added 2021/04/05 11:15 a.m.•39 views

Sql injection

A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the 'paryear' parameter when running a report...

6.5CVSS8.9AI score0.01602EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2021/04/05 11:15 a.m.•11 views

CVE-2021-30055

A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the 'paryear' parameter when running a report...

8.8CVSS7AI score0.01602EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/04/05 10:45 a.m.•35 views

CVE-2021-30055

A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the 'paryear' parameter when running a report...

9.2AI score0.01602EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/05 12:00 a.m.•11 views

CVE-2021-30055: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the 'paryear' parameter when running a report...

8.8CVSS5.8AI score0.01602EPSS
SaveExploits1References2
Rows per page
Query Builder