KA
Product
KNIME Analytics Platform
5
CVEs
0
On KEV
7.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch
Add KNIME Analytics Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-31500 | 7.8 | Jun 2 | In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions Affected: before 4.6.0 |
| CVE-2022-44749 | 7.0 | Nov 24 | A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overwritten on the… Affected: 3.2.0 before 4.6.4 |
| CVE-2023-5562 | 6.1 | Oct 12 | An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack Affected: before 5.2.0 |
| CVE-2026-115657 New | 4.8 | Oct 23 | KNIME Analytics Platform logs credentials of configured proxy when used as an executor Affected: All versions, or not specified |
| CVE-2021-45096 | 4.3 | Dec 16 | KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730 Affected: before 4.5.0 |
Showing 5
