Login Request a demo
KB
Product
KNIME Business Hub
by KNIME · last CVE Oct 22, 2026
13
CVEs
0
On KEV
8.8
Max CVSS
6
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 0High 4Medium 8Low 1
Severity
All severities13Critical0High4Medium8Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add KNIME Business Hub to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-2787
8.8
0%
Mar 26
Ingress-nginx vulnerability in KNIME Business Hub
Affected: 1.13.0 through 1.13.2; 1.12.0 through 1.12.3; 1.11.0 through 1.11.3; through 1.10.3
CVE-2025-2402
8.6
0%
Mar 31
Hard-coded password for object store of KNIME Business Hub
Affected: 1.13.0 before 1.13.2; 1.12.0 before 1.12.3; 1.11.0 before 1.11.3; before 1.10.3
CVE-2025-11240
7.2
0%
Oct 2
Open redirect vulnerability in KNIME Business Hub
Affected: before 1.16.0
CVE-2025-3019
7.2
0%
Mar 31
Cross-site scripting vulnerabilities in KNIME Business Hub web pages
Affected: 1.13.0 before 1.13.3; 1.12.0 before 1.12.4
CVE-2026-115496
New
6.9
0%
Oct 22
Workflow names may be leaked to unauthenticated users in KNIME Business Hub
Affected: before 1.18.4
CVE-2026-115517
New
6.4
0%
Oct 22
Unrestricted network access between execution contexts in KNIME Business Hub
Affected: before 1.19.0
CVE-2026-115502
New
6.3
0%
Oct 22
DataApp links without login expose job information to other user in KNIME Business Hub
Affected: before 1.19.0
CVE-2026-115494
New
5.3
0%
Oct 22
CSRF protection could be tricked by forged X-Forwarded-Host header in KNIME Business Hub
Affected: before 1.19.0
CVE-2026-115454
New
5.3
0%
Oct 22
Large tables in data apps can bring down execution services in KNIME Hub
Affected: before 1.19.0
CVE-2026-4649
5.3
0%
Mar 24
Auth bypass in Apache Artemis allows reading all internal messages
Affected: 1.17.0 before 1.17.4; 1.16.0 before 1.16.3; 0.0.0 before 1.15.2
CVE-2025-14262
4.3
0%
Dec 8
Jobs can be saved as workflows with wrong permissions on KNIME Business Hub
Affected: before 1.17.0
CVE-2025-11239
4.3
0%
Oct 2
Job details are visible to all team members on KNIME Business Hub
Affected: before 1.16.0
CVE-2026-115519
New
2.1
0%
Oct 22
Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub
Affected: before 1.19.0
Showing 13