Advisories · Technology

KnowageLabs Knowage-Server.

Every CVE that names KnowageLabs Knowage-Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-58441 CVE record

CVSS 6.3 Medium

Knowage is vulnerable to blind server-side request forgery (SSRF)
- KnowageLabs Knowage-Server
- Server-side request forgery (SSRF)
Not analysed yet 7 Jan 2026
CVE-2025-59954 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Knowage Contains a Remote Code Execution Vulnerability
- KnowageLabs Knowage-Server
- Code injection
Not analysed yet 29 Sept 2025
CVE-2025-55007 CVE record

CVSS 3.5 Low

Knowage vulnerable to server-side request forgery
- KnowageLabs Knowage-Server
- Server-side request forgery (SSRF)
Not analysed yet 1 Sept 2025
CVE-2023-38702 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Knowage Server vulnerable to path traversal via upload functionality
- KnowageLabs Knowage-Server
- Path traversal
Not analysed yet 4 Aug 2023
CVE-2023-37472 CVE record

CVSS 7.7 High

Query injection in Knowage server
- KnowageLabs Knowage-Server
- SQL injection
Not analysed yet 14 Jul 2023
CVE-2023-36819 CVE record

CVSS 6.5 Medium

Knowage-Server vulnerable to Path traversal in download functionalities
- KnowageLabs Knowage-Server
- Path traversal
Not analysed yet 3 Jul 2023
CVE-2023-35154 CVE record

CVSS 7.2 High

Knowage-Server vulnerable to account validation bypass
- KnowageLabs Knowage-Server
- Authentication bypass
Not analysed yet 23 Jun 2023
CVE-2022-39295 CVE record

CVSS 6.1 Medium

Improper Neutralization of Alternate XSS Syntax in Knowage-Server
- KnowageLabs Knowage-Server
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2022