https://vulnogram.org/ Most recent CVEs assigned by KNIME AG (knime). https://vulnogram.org/seaview/icons/knime.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-4649 https://vulnogram.org/CVE-2026-4649 Apache Artemis before version 2.52.0 is affected by an authentication bypass flaw which allows reading all messages exchanged via the broker and injection of new message ( CVE-2026-27446 https://www.cve.org/CVERecord ). Since KNIME Business Hub uses… Medium Tue, 24 Mar 2026 08:15:16 GMT https://vulnogram.org/CVE-2025-14262 https://vulnogram.org/CVE-2025-14262 A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other users as if there were saved by the job owner. The attacker must have permissions to access the jobs but then they were saved int… Medium Mon, 08 Dec 2025 09:34:45 GMT https://vulnogram.org/CVE-2025-11240 https://vulnogram.org/CVE-2025-11240 An open redirect vulnerability existed in KNIME Business Hub prior to version 1.16.0. An unauthenticated remote attacker could craft a link to a legitimate KNIME Business Hub installation which, when opened by the user, redirects the user to a page o… Medium Network Exploitable Thu, 02 Oct 2025 12:30:33 GMT https://vulnogram.org/CVE-2025-11239 https://vulnogram.org/CVE-2025-11239 Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a job can see… Low Thu, 02 Oct 2025 12:23:18 GMT https://vulnogram.org/CVE-2025-3019 https://vulnogram.org/CVE-2025-3019 KNIME Business Hub is affected by several cross-site scripting vulnerabilities in its web pages. If a user clicks on a malicious link or opens a malicious web page, arbitrary Java Script may be executed with this user's permissions. This can lead to… Medium Network Exploitable Mon, 31 Mar 2025 06:49:34 GMT https://vulnogram.org/CVE-2025-2402 https://vulnogram.org/CVE-2025-2402 A hard-coded, non-random password for the object store (minio) of KNIME Business Hub in all versions except the ones listed below allows an unauthenticated remote attacker in possession of the password to read and manipulate swapped jobs or read and… High Network Exploitable Mon, 31 Mar 2025 06:11:39 GMT https://vulnogram.org/CVE-2025-2787 https://vulnogram.org/CVE-2025-2787 KNIME Business Hub is affected by the Ingress-nginx CVE-2025-1974 ( a.k.a IngressNightmare ) vulnerability which affects the ingress-nginx component. In the worst case a complete takeover of the Kubernetes cluster is possible. Since the affected comp… High Wed, 26 Mar 2025 21:08:08 GMT https://vulnogram.org/CVE-2024-6598 https://vulnogram.org/CVE-2024-6598 A denial-of-service attack is possible through the execution functionality of KNIME Business Hub 1.10.0 and 1.10.1. It allows an authenticated attacker with job execution privileges to execute a job that causes internal messages to pile up until ther… High Tue, 09 Jul 2024 13:41:15 GMT https://vulnogram.org/CVE-2023-5562 https://vulnogram.org/CVE-2023-5562 An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack. When KNIME Analytics Platform is used as an executor for either KNIME Server or KNIME Business Hub several JavaScript-based view nodes… Medium Network Exploitable Thu, 12 Oct 2023 19:00:54 GMT https://vulnogram.org/CVE-2023-3140 https://vulnogram.org/CVE-2023-3140 Missing HTTP headers (X-Frame-Options, Content-Security-Policy) in KNIME Business Hub before 1.4.0 has left users vulnerable to click jacking. Clickjacking is an attack that occurs when an attacker uses a transparent iframe in a window to trick a use… Medium Network Exploitable Wed, 07 Jun 2023 09:15:00 GMT https://vulnogram.org/CVE-2023-2541 https://vulnogram.org/CVE-2023-2541 The Web Frontend of KNIME Business Hub before 1.4.0 allows an unauthenticated remote attacker to access internals about the application such as versions, host names, or IP addresses. No personal information or application data was exposed. Medium Network Exploitable Wed, 07 Jun 2023 08:08:50 GMT https://vulnogram.org/CVE-2022-44749 https://vulnogram.org/CVE-2022-44749 A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overwritten on the user's system. This vulnerability is also known as 'Zip-Slip'. An attacker c… Medium Thu, 24 Nov 2022 06:39:22 GMT https://vulnogram.org/CVE-2022-44748 https://vulnogram.org/CVE-2022-44748 A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arbitrary files being overwritten on the server's file system. This vulnerability is also known as 'Zip-Slip'. An attacker can create… High Thu, 24 Nov 2022 06:36:23 GMT