CVE-2021-30058

Knowage Suite before 7.4 is vulnerable to cross-site scripting (XSS)

published April 5, 2021

CVSS
—
EPSS
1%
Percentile
62.3
In the wild
Unconfirmed
What it is

Knowage Suite before 7.4 is vulnerable to cross-site scripting (XSS). An attacker can inject arbitrary external script in '/knowagecockpitengine/api/1.0/pages/execute' via the 'SBI_HOST' parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00994 · 62.3th percentile
Published
2021-04-05T10:45Z
EPSS history
Timeline
  • 05 APR 10:45Z
    Knowage Suite before 7.4 is vulnerable to cross-site scripting (XSS)
    cvelistv5