Eng

Eng's vulnerability footprint, while concentrated in a small product portfolio, reaches a more prominent standing than its product count suggests, centered on the Knowage and SpagoBI business-intelligence and reporting platforms. Vulnerabilities affecting the vendor skew toward serious outcomes, with a meaningful share reaching critical severity and a notable tendency toward public exploit availability, reflecting the web-facing nature and data-access privileges of these analytics platforms. The exposure recurs through a durable pattern of application-layer weaknesses: cross-site scripting, authentication bypasses, code injection, path traversal, and injection flaws that are characteristic of complex web applications handling user input and file system operations. Defenders should prioritize patches for these platforms, particularly in internet-reachable deployments, given the combination of serious severity and the availability of exploit tooling. Current severity, exploitation, and exposure counts are shown alongside this summary.