knowage-suite kayıtları
knowage-suite üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-522 Insufficiently Protected Credentials1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2018-12354İstismar yok | Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST requknowage-suite · knowage · CWE-352 | Yüksek8,8 | — | %0,4 | 13 Haz 2018 |
24İzleyin | CVE-2018-12353İstismar yok | Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name field to the "Business Model's Catalogue" catalogue.knowage-suite · knowage · CWE-79 | Orta6,1 | — | %0,6 | 13 Haz 2018 |
21İzleyin | CVE-2019-14278İstismar yok | In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page.knowage-suite · knowage | Orta5,3 | — | %1,1 | 5 Eyl 2019 |
19İzleyin | CVE-2019-13349İstismar yok | In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes.knowage-suite · knowage · CWE-522 | Orta4,9 | — | %1,3 | 5 Eyl 2019 |
- CVE-2018-1235435İzleyin
Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST requ
YüksekCVSS 8,8İstismar yokEPSS %0knowage-suite · knowage13 Haz 2018
- CVE-2018-1235324İzleyin
Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name field to the "Business Model's Catalogue" catalogue.
OrtaCVSS 6,1İstismar yokEPSS %0knowage-suite · knowage13 Haz 2018
- CVE-2019-1427821İzleyin
In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page.
OrtaCVSS 5,3İstismar yokEPSS %1knowage-suite · knowage5 Eyl 2019
- CVE-2019-1334919İzleyin
In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes.
OrtaCVSS 4,9İstismar yokEPSS %1knowage-suite · knowage5 Eyl 2019