Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
EngSpagobi

3 matches found

CVE
CVE•added 2014/03/09 1:16 p.m.•40 views

CVE-2013-6232

Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via a document note in the execution page.

3.5CVSS5.3AI score0.01019EPSS
CVE
CVE•added 2014/10/08 7:55 p.m.•33 views

CVE-2014-7296

The default configuration in the accessibility engine in SpagoBI 5.0.0 does not set FEATURE_SECURE_PROCESSING, which allows remote authenticated users to execute arbitrary Java code via a crafted XSL document.

6.8CVSS7.3AI score0.00533EPSS
CVE
CVE•added 2014/03/09 1:16 p.m.•30 views

CVE-2013-6233

Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field in the "Short document metadata."

4.3CVSS5.2AI score0.05635EPSS