Knowage Security Vulnerabilities and Issues — Knowage CVE List

Lucene search

EngKnowage

2 matches found

CVE•added 2019/08/28 4:15 p.m.•32 views

CVE-2019-13348

In Knowage through 6.1.1, an authenticated user who accesses the datasources page will gain access to any data source credentials in cleartext, which includes databases.

8.8CVSS8.6AI score0.01173EPSS

CVE•added 2019/08/28 4:15 p.m.•28 views

CVE-2019-13189

In Knowage through 6.1.1, there is XSS via the start_url or user_id field to the ChangePwdServlet page.

6.1CVSS5.9AI score0.0021EPSS