Skip to content
OpenAdvisories

Vendor

KnowageLabs

8 known vulnerabilities.

Products

Knowage-Server 8
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-58441

    Knowage is vulnerable to blind server-side request forgery (SSRF)

    Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, there is a blind server-side request forgery vulnerability. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not a…

    KnowageLabs Knowage-Server
  • Medium 6.5
    CVE-2023-36819

    Knowage-Server vulnerable to Path traversal in download functionalities

    Knowage is the professional open source suite for modern business analytics over traditional sources and big data systems. The endpoint `_/knowage/restful-services/dossier/importTemplateFile_` allows authenticated users to download template hosted on the serv…

    KnowageLabs Knowage-Server
  • Medium 6.1
    CVE-2022-39295

    Improper Neutralization of Alternate XSS Syntax in Knowage-Server

    Knowage is an open source suite for modern business analytics alternative over big data systems. KnowageLabs / Knowage-Server starting with the 6.x branch and prior to versions 7.4.22, 8.0.9, and 8.1.0 is vulnerable to cross-site scripting because the `XSSReq…

    KnowageLabs Knowage-Server