VendorsEngspagobiany version
Vulnerabilities

Eng ineering Ingegneria Informatica S.p.A SpagoBI any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2013-6231
SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script
Published 2020-01-10 · Modified
9.01 PoCEPSS 0.099
CVE-2013-6234
Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, aka "XSS File Upload."
Published 2019-11-22 · Modified
8.01 PoCEPSS 0.067
CVE-2013-6233
Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field in the "Short document metadata."
Published 2014-03-07 · Modified
4.31 PoCEPSS 0.032
CVE-2013-6232
Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via a document note in the execution page.
Published 2014-03-07 · Modified
3.51 PoCEPSS 0.037