CVE-2018-12355: Eng Knowage

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name or description field to the "Olap Schemas' Catalogue" catalogue.

Affected products

• Eng Knowage: version 6.1.1 only

Published 2018-06-13. Last modified 2026-06-17.