CVE-2018-12355: XSS
Published Jun 13, 2018
·Updated
Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name or description field to the "Olap Schemas' Catalogue" catalogue.
Affected Software
1 affected component
eng Knowage=6.1.1
Event History
Jun 13, 2018
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-12355?
CVE-2018-12355 has been rated as a medium severity vulnerability due to its potential for XSS exploitation.
2
How do I fix CVE-2018-12355?
To fix CVE-2018-12355, upgrade to Knowage version 6.1.2 or later where the XSS vulnerability has been addressed.
3
What types of attacks can be executed through CVE-2018-12355?
CVE-2018-12355 allows attackers to exploit the vulnerability to execute cross-site scripting (XSS) attacks.
4
Who is affected by CVE-2018-12355?
Users of Knowage version 6.1.1 that utilize the 'Olap Schemas' Catalogue feature are affected by CVE-2018-12355.
5
What are the consequences of CVE-2018-12355 exploitation?
Exploitation of CVE-2018-12355 could lead to unauthorized access to user sessions and betrayal of user trust through malicious script execution.