Lucene search
K

7 matches found

CVE
CVE
โ€ขadded 2026/01/07 5:16 p.m.โ€ข6 views

CVE-2025-58441

Knowage (open source analytics/BI suite) prior to version 8.1.37 is affected by a blind server-side request forgery (SSRF). The issue allows an attacker to send requests to arbitrary hosts/paths, but cannot read responses, limiting direct impact. However, it could be used to scan internal network...

6.5CVSS6.5AI score0.00032EPSS
Exploits0References1Affected Software1
OSV
OSV
โ€ขadded 2026/01/07 5:16 p.m.โ€ข3 views

CVE-2025-58441 Knowage is vulnerable to blind server-side request forgery (SSRF)

Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, there is a blind server-side request forgery vulnerability. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact o...

6.3CVSS6.8AI score0.00032EPSS
Exploits0References3
CNNVD
CNNVD
โ€ขadded 2026/01/07 12:0 a.m.โ€ข1 views

Knowage ไปฃ็ ้—ฎ้ข˜ๆผๆดž

Knowage is an open source suite for modern business analytics on legacy resources and big data systems from Knowage, Italy. A code issue vulnerability exists in Knowage versions prior to 8.1.37, which stems from the presence of blind server-side request forgery that could lead an attacker to scan...

6.5CVSS6.8AI score0.00032EPSS
Exploits0References1
EUVD
EUVD
โ€ขadded 2025/10/03 8:7 p.m.โ€ข2 views

EUVD-2025-26348

Malicious code in bioql PyPI...

5.3CVSS6.5AI score0.00043EPSS
Exploits0References1
RedhatCVE
RedhatCVE
โ€ขadded 2025/09/03 4:23 p.m.โ€ข2 views

CVE-2025-55007

Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, Knowage is vulnerable to server-side request forgery. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact of this...

5.3CVSS6.9AI score0.00043EPSS
Exploits0References1
Cvelist
Cvelist
โ€ขadded 2025/09/01 3:46 p.m.โ€ข7 views

CVE-2025-55007 Knowage vulnerable to server-side request forgery

Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, Knowage is vulnerable to server-side request forgery. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact of this...

3.5CVSS0.00043EPSS
Exploits0References1
Positive Technologies
Positive Technologies
โ€ขadded 2025/09/01 12:0 a.m.โ€ข2 views

PT-2025-35494

Name of the Vulnerable Software and Affected Versions: Knowage versions prior to 8.1.37 Description: Knowage is vulnerable to server-side request forgery. The vulnerability allows attackers to send requests to arbitrary hosts/paths. The impact of this vulnerability is limited as attackers cannot...

5.3CVSS6.5AI score0.00043EPSS
Exploits0References5
Rows per page
Query Builder