What is CVE-2025-55007?

CVE-2025-55007 is a low-severity vulnerability in Eng Knowage, classified under Server-Side Request Forgery (SSRF). CVSS score: 3.5/10. Published 2025-09-01.

How severe is CVE-2025-55007?

Low severity. CVSS v3 base score is 3.5 out of 10.

Is CVE-2025-55007 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SSRF in Eng Knowage

CVE-2025-55007

Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, Knowage is vulnerable to server-side request forgery. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact of this vulnerability is limited. However, an attacker could be able to leverage this vulnerability to scan the internal network. This issue has been patched in version 8.1.37.

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.002 (8.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N.

Affected products

Eng Knowage
Knowagelabs Knowage-server — versions < 8.1.37

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

security-advisories@github.com (x_refsource_CONFIRM, Patch, Third Party Advisory)

Frequently asked questions

What is CVE-2025-55007?: CVE-2025-55007 is a low-severity vulnerability in Eng Knowage, classified under Server-Side Request Forgery (SSRF). CVSS score: 3.5/10. Published 2025-09-01.
How severe is CVE-2025-55007?: Low severity. CVSS v3 base score is 3.5 out of 10.
Is CVE-2025-55007 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.