rsbi-os 4.7 is vulnerable to Remote Code Execution (RCE) in sqlite-jdbc.
rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path.