Eng Spagobi
8 CVEs affecting Eng Spagobi. Latest disclosed: 2025-01-21. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-54794 | Critical | 9.1 | 2025-01-21 | The script input feature of SpagoBI 3.5.1 allows arbitrary code execution. |
CVE-2013-6231 | High | 8.8 | 2020-01-10 | SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script |
CVE-2013-6234 | High | 8.0 | 2019-11-22 | Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading… |
CVE-2024-54792 | Medium | 6.1 | 2025-01-21 | A Cross-Site Request Forgery (CSRF) vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another use… |
CVE-2024-54795 | Medium | 5.4 | 2025-01-21 | SpagoBI v3.5.1 contains multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the create/edit forms of the worksheet designer function. |
CVE-2014-7296 | | 2014-10-08 | The default configuration in the accessibility engine in SpagoBI 5.0.0 does not set FEATURE_SECURE_PROCESSING, which allows remote authenticated users to execu… | |
CVE-2013-6233 | | 2014-03-09 | Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description fie… | |
CVE-2013-6232 | | 2014-03-09 | Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via a document note in… |