CVE-2025-59954

Published September 30th, 2025

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

PROJECT

Description

Knowage is an open source analytics and business intelligence suite. Versions 8.1.26 and below are vulnerable to Remote Code Exection through using an unsafe org.apache.commons.jxpath.JXPathContext in MetaService.java service. This issue is fixed in version 8.1.27.

KnowageLabs/Knowage-Server

Knowage is the professional open source suite for modern business analytics over traditional sources and big data systems.

GitHub

444