Vendors / KNIME Records 26 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 8
Exploited now KNIME records in CISA KEV No KNIME vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 33
In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00229 · Published 2022-05-31 · No fix listed CWE-276
Priority LOW 31
A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overwritten on the user's system.
CVSS 3.1 HIGH 7.0· Local · No auth · User interaction · EPSS 0.00444 · Published 2022-11-24 · Fixed in 4.5.3, 4.6.4 +1 CWE-22
Priority LOW 27
An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00353 · Published 2023-10-12 · Fixed in 5.2.0 CWE-79
Priority LOW 24
KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730.
CVSS 3.1 MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.01106 · Published 2021-12-16 · No fix listed CWE-611
Open these records in search → All records by CVSS severity
0 8 16 2 0
THREATIST.IORead the docs