CVE-2019-14278

Technical details about CVE-2019-14278 are not publicly available in the provided connected documents; no additional specifics on affected components, exploit methods, or remediation are included here. Monitor for updates.

CVE-2019-13349

CVE-2019-13349 affects Knowage up to version 6.1.1, where an authenticated user accessing the users page can obtain all user password hashes. The connected Red Hat/CNVD/CVE lists corroborate the same description. The impact is exposure of password hashes to an authenticated user; exploit details,...

CVE-2018-12354

Knowage (formerly SpagoBI) 6.1.1 is documented as vulnerable to cross-site request forgery (CSRF) via every form, demonstrated by a POST to /knowage/restful-services/2.0/analyticalDrivers/. CVE-2018-12354 is assessed with CVSS v3.0 base score 8.8 (HIGH) and CVSS v2.0 base score 6.8 (MEDIUM) indic...

CVE-2018-12353

Knowage (formerly SpagoBI) 6.1.1 is affected by a Cross-Site Scripting (XSS) vulnerability in the name field of the Business Model’s Catalogue, leading to script injection in the catalogue view. The issue is documented as CVE-2018-12353 with public references indicating XSS via the name field and...