Skip to content
OpenAdvisories

Vendor

KnowageLabs

8 known vulnerabilities.

Products

Knowage-Server 8
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-59954

    Knowage Contains a Remote Code Execution Vulnerability

    Knowage is an open source analytics and business intelligence suite. Versions 8.1.26 and below are vulnerable to Remote Code Exection through using an unsafe org.apache.commons.jxpath.JXPathContext in MetaService.java service. This issue is fixed in version 8…

    KnowageLabs Knowage-Server
  • Critical 10.0
    CVE-2023-38702

    Knowage Server vulnerable to path traversal via upload functionality

    Knowage is an open source analytics and business intelligence suite. Starting in the 6.x.x branch and prior to version 8.1.8, the endpoint `/knowage/restful-services/dossier/importTemplateFile` allows authenticated users to upload `template file` on the serve…

    KnowageLabs Knowage-Server