Vulnerabilities > ENG > Knowage > High

DATE CVE VULNERABILITY TITLE RISK
2023-08-04 CVE-2023-38702 Unspecified vulnerability in ENG Knowage
Knowage is an open source analytics and business intelligence suite.
network
low complexity
eng
8.8
8.8
2021-04-05 CVE-2021-30055 SQL Injection vulnerability in ENG Knowage
A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the 'par_year' parameter when running a report.
network
low complexity
eng CWE-89
8.8
8.8
2019-08-28 CVE-2019-13348 Insufficiently Protected Credentials vulnerability in ENG Knowage
In Knowage through 6.1.1, an authenticated user who accesses the datasources page will gain access to any data source credentials in cleartext, which includes databases.
network
low complexity
eng CWE-522
8.8
8.8