KNIME

Latest CVEs · RSS

• CVE-2026-4649 2026-03-24 · CVSS 5.3
  Apache Artemis before version 2.52.0 is affected by an authentication bypass flaw which allows reading all messages exchanged via the broker and injection of ne
• CVE-2025-14262 2025-12-08 · CVSS 5.3
  A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other users as if there were saved by the job
• CVE-2025-11240 2025-10-02 · CVSS 5.3
  An open redirect vulnerability existed in KNIME Business Hub prior to version 1.16.0. An unauthenticated remote attacker could craft a link to a legitimate KNIM
• CVE-2025-11239 2025-10-02 · CVSS 2.3
  Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub
• CVE-2025-3019 2025-03-31 · CVSS 5.3
  KNIME Business Hub is affected by several cross-site scripting vulnerabilities in its web pages. If a user clicks on a malicious link or opens a malicious web p
• CVE-2025-2402 2025-03-31 · CVSS 8.8
  A hard-coded, non-random password for the object store (minio) of KNIME Business Hub in all versions except the ones listed below allows an unauthenticated remo
• CVE-2025-2787 2025-03-26 · CVSS 8.7
  KNIME Business Hub is affected by the Ingress-nginx CVE-2025-1974 ( a.k.a IngressNightmare ) vulnerability which affects the ingress-nginx component. In the wor
• CVE-2024-6598 2024-07-09 · CVSS 7.1
  A denial-of-service attack is possible through the execution functionality of KNIME Business Hub 1.10.0 and 1.10.1. It allows an authenticated attacker with job
• CVE-2023-5562 2023-10-12 · CVSS 6.1
  An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack. When KNIME Analytics Platform is used as an e
• CVE-2023-3140 2023-06-07 · CVSS 4.3
  Missing HTTP headers (X-Frame-Options, Content-Security-Policy) in KNIME Business Hub before 1.4.0 has left users vulnerable to click jacking. Clickjacking is
• CVE-2023-2541 2023-06-07 · CVSS 5.3
  The Web Frontend of KNIME Business Hub before 1.4.0 allows an unauthenticated remote attacker to access internals about the application such as versions, host n
• CVE-2022-44749 2022-11-24 · CVSS 5.5
  A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overw
• CVE-2022-44748 2022-11-24 · CVSS 7.1
  A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arbitrary files being overwritten on the se