Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: KNIME Business Hub 1.19.0 Clear all filters
TI-2026-79494 CVE-2026-115519 · GHSA-p7r5-wmfj-6x3r

Missing Secure and HttpOnly flags on cookies in KNIME Business Hub

Priority LOW 10

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vu…

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.00186 Published 2026-10-22 Fixed in 1.19.0 CWE-1004
TI-2026-79493 CVE-2026-115517 · GHSA-v9j9-wfhx-mj42

Missing isolation between execution contexts in KNIME Business Hub

Priority LOW 29

Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors in different execution contexts.

CVSS 4.0MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00431 Published 2026-10-22 Fixed in 1.19.0 CWE-653
TI-2026-79324 CVE-2026-115502 · GHSA-xwcw-wjgv-8cxr

Missing authorization in KNIME Business Hub DataApp links exposes jobs

Priority LOW 28

A missing authorization check allows anyone having access to a "link without login" for a DataApp to list and potentially access jobs of other users created by the same link in KNIME Business Hub prior to 1.19.0.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00277 Published 2026-10-22 Fixed in 1.19.0 CWE-862
TI-2026-79308 CVE-2026-115494 · GHSA-4rqh-69w9-947v

CSRF protection bypass in KNIME Business Hub via forged host header

Priority LOW 23

A flaw in the cross-site request forgery (CSRF) prevention of KNIME Business Hub prior to version 1.19.0 allows an authenticated attacker to perform a CSRF attack with passive user interaction.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00191 Published 2026-10-22 Fixed in 1.19.0 CWE-352
TI-2026-79307 CVE-2026-115454 · GHSA-fxwp-xw32-gfxw

Large tables in data apps can bring down execution services in KNIME Hub

Priority LOW 24

An excessive resource allocation issue in the remote workflow editing capabilities of KNIME Business Hub prior to version 1.19.0 allows a authenticated attack to exhaust resources on the server side.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00365 Published 2026-10-22 Fixed in 1.19.0 CWE-770