Login Request a demo
KN
Vendor
KNIME
4 products with CVEs on record
31
CVEs
0
On KEV
7
New 30D
Products
KB
KNIME Business Hub
KNIME
8.8
13 CVEs0 on KEV6 new
KA
KNIME Analytics Platform
KNIME
7.8
5 CVEs0 on KEV1 new
BH
Business Hub
Knime
8.8
9 CVEs0 on KEV0 new
KS
Knime Server
Knime
7.5
4 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115657
New
KA
KNIME Analytics Platform
KNIME
4.8
0%
Oct 23KNIME Analytics Platform logs credentials of configured proxy when used as an executor
CVE-2026-115519
New
KB
KNIME Business Hub
KNIME
2.1
0%
Oct 22Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub
CVE-2026-115517
New
KB
KNIME Business Hub
KNIME
6.4
0%
Oct 22Unrestricted network access between execution contexts in KNIME Business Hub
CVE-2026-115502
New
KB
KNIME Business Hub
KNIME
6.3
0%
Oct 22DataApp links without login expose job information to other user in KNIME Business Hub
CVE-2026-115496
New
KB
KNIME Business Hub
KNIME
6.9
0%
Oct 22Workflow names may be leaked to unauthenticated users in KNIME Business Hub
CVE-2026-115494
New
KB
KNIME Business Hub
KNIME
5.3
0%
Oct 22CSRF protection could be tricked by forged X-Forwarded-Host header in KNIME Business Hub
CVE-2026-115454
New
KB
KNIME Business Hub
KNIME
5.3
0%
Oct 22Large tables in data apps can bring down execution services in KNIME Hub
CVE-2026-4649
KB
KNIME Business Hub
KNIME
5.3
0%
Mar 24Auth bypass in Apache Artemis allows reading all internal messages
CVE-2025-14262
KB
KNIME Business Hub
KNIME
4.3
0%
Dec 8Jobs can be saved as workflows with wrong permissions on KNIME Business Hub
CVE-2025-11240
KB
KNIME Business Hub
KNIME
7.2
0%
Oct 2Open redirect vulnerability in KNIME Business Hub
CVE-2025-11239
KB
KNIME Business Hub
KNIME
4.3
0%
Oct 2Job details are visible to all team members on KNIME Business Hub
CVE-2025-3019
KB
KNIME Business Hub
KNIME
7.2
0%
Mar 31Cross-site scripting vulnerabilities in KNIME Business Hub web pages
CVE-2025-2402
KB
KNIME Business Hub
KNIME
8.6
0%
Mar 31Hard-coded password for object store of KNIME Business Hub
CVE-2025-2787
KB
KNIME Business Hub
KNIME
8.8
0%
Mar 26Ingress-nginx vulnerability in KNIME Business Hub
CVE-2024-6598
BH
Business Hub
Knime
6.5
1%
Jul 9A denial-of-service attack is possible through the execution functionality of KNIME Business Hub 1.10.0 and 1.10.1
CVE-2023-5562
KA
Knime Analytics Platform
Knime
6.1
0%
Oct 12An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack
CVE-2023-3140
BH
Business Hub
Knime
4.3
0%
Jun 7Missing HTTP headers (X-Frame-Options, Content-Security-Policy) in KNIME Business Hub before 1.4.0 has left users vulnerable to click jacking
CVE-2023-2541
BH
Business Hub
Knime
5.3
1%
Jun 7The Web Frontend of KNIME Business Hub before 1.4.0 allows an unauthenticated remote attacker to access internals about the application such as versions, host names, or IP…
CVE-2022-44749
KA
Knime Analytics Platform
Knime
7.0
0%
Nov 24A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overwritten on the…
CVE-2022-44748
KS
Knime Server
Knime
7.5
1%
Nov 24A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arbitrary files being overwritten on the server's file system
CVE-2022-31500
KA
Knime Analytics Platform
Knime
7.8
0%
Jun 2In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions
CVE-2021-45097
KS
Knime Server
Knime
5.5
0%
Dec 16KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without appropriate file access controls,…
CVE-2021-45096
KA
Knime Analytics Platform
Knime
4.3
1%
Dec 16KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730
CVE-2021-44726
KS
Knime Server
Knime
6.1
1%
Dec 8KNIME Server before 4.13.4 allows XSS via the old WebPortal login page
CVE-2021-44725
KS
Knime Server
Knime
7.5
2%
Dec 8KNIME Server before 4.13.4 allows directory traversal in a request for a client profile