eng
Security Risk Profile
49
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 29 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 7, 2014 to present
29
Total CVEs
10
Critical+High
0
Exploited
9
Unpatched
Threat Assessment
Avg CVSS
6.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
9
Critical/High
Risk Level
49/100
medium
Severity Distribution
Critical
5High
5Medium
18Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
12
2
SSRF
2
3
Code Injection
2
4
Path Traversal
2
5
SQL Injection
2
Most Affected Products
1. eng Knowage22
2. eng SpagoBI8
3. Knowage Knowage3
4. SpagoBI SpagoBI3
Recent Vulnerabilities
See more →CVE-2025-58441
CVSS 6.5medium
Knowage is vulnerable to blind server-side request forgery (SSRF)
1/7/2026🔧 No Patch
CVE-2025-59954
CVSS 9.8critical
Knowage Contains a Remote Code Execution Vulnerability
9/29/2025
CVE-2025-55007
CVSS 5.3medium
Knowage vulnerable to server-side request forgery
9/1/2025
CVE-2024-54794
CVSS 9.1critical
1/21/2025🔧 No Patch
CVE-2024-54792
CVSS 6.1medium
1/21/2025🔧 No Patch
CVE-2024-54795
CVSS 5.4medium
1/21/2025🔧 No Patch
CVE-2023-38702
CVSS 10.0critical
Knowage Server vulnerable to path traversal via upload functionality
8/4/2023🔧 No Patch
CVE-2023-37472
CVSS 7.7high
Query injection in Knowage server
7/14/2023🔧 No Patch
CVE-2023-36819
CVSS 6.5medium
Knowage-Server vulnerable to Path traversal in download functionalities
7/3/2023🔧 No Patch
CVE-2023-35154
CVSS 7.2high
Knowage-Server vulnerable to account validation bypass
6/23/2023🔧 No Patch
Monitor eng in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.