cbcvebase.
CVE-2014-7296
published 2014-10-08

CVE-2014-7296: The default configuration in the accessibility engine in SpagoBI 5.0.0 does not set FEATURE_SECURE_PROCESSING, which allows remote authenticated users to…

PriorityP338medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
1.70%
74.3th percentile
The default configuration in the accessibility engine in SpagoBI 5.0.0 does not set FEATURE_SECURE_PROCESSING, which allows remote authenticated users to execute arbitrary Java code via a crafted XSL document.

Affected

1 ranges
VendorProductVersion rangeFixed in
engspagobi——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.