Read the docs

KNIME

Records26All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

KNIME records in CISA KEV

No KNIME vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Business Hub 9 records MEDIUM Knime Analytics Platform 4 records LOW Knime Server 4 records LOW

Records

4 records in Knime Server · all components

TI-2022-22037 CVE-2022-44748 · GHSA-29c9-qmhw-f6px

Uploading workflows to KNIME Server may override arbitrary file system contents

Priority LOW 36

A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arbitrary files being overwritten on the server's file system.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01458 Published 2022-11-24 Fixed in 4.15.3, 4.14.3 +1 CWE-22
TI-2021-20429 CVE-2021-45097 · GHSA-3pcx-vgx2-j88m

KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode)…

Priority LOW 24

KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without appropriate file access controls, allowing all local users to read its content.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00223 Published 2021-12-16 No fix listed CWE-522
Open these records in search →