Knowagelabs Knowage-server
8 CVEs affecting Knowagelabs Knowage-server. Latest disclosed: 2026-01-07. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-38702 | Critical | 9.9 | 2023-08-04 | Knowage is an open source analytics and business intelligence suite. Starting in the 6.x.x branch and prior to version 8.1.8, the endpoint `/knowage/restful-se… |
CVE-2025-59954 | Critical | 9.8 | 2025-09-30 | Knowage is an open source analytics and business intelligence suite. Versions 8.1.26 and below are vulnerable to Remote Code Exection through using an unsafe o… |
CVE-2023-37472 | High | 7.7 | 2023-07-14 | Knowage is an open source suite for business analytics. The application often use user supplied data to create HQL queries without prior sanitization. An attac… |
CVE-2023-35154 | High | 7.2 | 2023-06-23 | Knowage is an open source analytics and business intelligence suite. Starting in version 6.0.0 and prior to version 8.1.8, an attacker can register and activat… |
CVE-2025-58441 | Medium | 6.5 | 2026-01-07 | Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, there is a blind server-side request forgery vulnerability. The v… |
CVE-2023-36819 | Medium | 6.5 | 2023-07-03 | Knowage is the professional open source suite for modern business analytics over traditional sources and big data systems. The endpoint `_/knowage/restful-serv… |
CVE-2022-39295 | Medium | 6.1 | 2022-10-13 | Knowage is an open source suite for modern business analytics alternative over big data systems. KnowageLabs / Knowage-Server starting with the 6.x branch and… |
CVE-2025-55007 | Low | 3.5 | 2025-09-01 | Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, Knowage is vulnerable to server-side request forgery. The vulnera… |