Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: KNIME Component: Knime Server Clear all filters
TI-2022-22037 CVE-2022-44748 · GHSA-29c9-qmhw-f6px

Uploading workflows to KNIME Server may override arbitrary file system contents

Priority LOW 36

A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arbitrary files being overwritten on the server's file system.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01458 Published 2022-11-24 Fixed in 4.15.3, 4.14.3 +1 CWE-22
TI-2021-20429 CVE-2021-45097 · GHSA-3pcx-vgx2-j88m

KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode)…

Priority LOW 24

KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without appropriate file access controls, allowing all local users to read its content.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00223 Published 2021-12-16 No fix listed CWE-522