CVE-2021-30055: Eng Knowage

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the 'par_year' parameter when running a report.

Affected products

• Eng Knowage: before 7.4 (fixed in 7.4)

Published 2021-04-05. Last modified 2026-06-17.