Vulnerabilidades em KNIME
20 resultadosAnálise Vexday
KNIME possui 13 vulnerabilidades registradas na base do Vexday, predominantemente relacionadas a traversal de diretórios (CWE-22), mas nenhuma está sob exploração ativa conhecida ou classificada como crítica. O perfil de risco é baixo no curto prazo, sem atividades de ataque documentadas ou descobertas recentes que elevem a urgência de remediação imediata.
CVE-2022-44748HIGHUploading workflows to KNIME Server may override arbitrary file system contentsEPSS 1.5%CVE-2023-2541MEDIUMSensitive information disclosure in KNIME Hub Web ApplicationEPSS 0.6%CVE-2024-6598HIGHDenial-of-service on KNIME Business Hub when certain jobs are executedEPSS 0.5%CVE-2025-2787HIGHIngress-nginx vulnerability in KNIME Business HubEPSS 0.5%CVE-2022-44749MEDIUMOpening workflows from untrusted resources may override arbitrary file system contentsEPSS 0.4%CVE-2026-115517MEDIUMUnrestricted network access between execution contexts in KNIME Business HubEPSS 0.4%CVE-2023-3140MEDIUMKNIME Hub Web Application is vulnerable to clickjackingEPSS 0.4%CVE-2026-115496MEDIUMWorkflow names may be leaked to unauthenticated users in KNIME Business HubEPSS 0.4%CVE-2025-2402HIGHHard-coded password for object store of KNIME Business HubEPSS 0.4%CVE-2026-4649MEDIUMAuth bypass in Apache Artemis allows reading all internal messagesEPSS 0.4%CVE-2026-115454MEDIUMLarge tables in data apps can bring down execution services in KNIME HubEPSS 0.4%CVE-2023-5562MEDIUMUnsafe default allows for cross-site scripting attacks in KNIME Server and KNIME Business HubEPSS 0.4%CVE-2026-115502MEDIUMDataApp links without login expose job information to other user in KNIME Business HubEPSS 0.3%CVE-2025-3019MEDIUMCross-site scripting vulnerabilities in KNIME Business Hub web pagesEPSS 0.3%CVE-2025-11240MEDIUMOpen redirect vulnerability in KNIME Business HubEPSS 0.3%CVE-2025-11239LOWJob details are visible to all team members on KNIME Business HubEPSS 0.2%CVE-2025-14262MEDIUMJobs can be saved as workflows with wrong permissions on KNIME Business HubEPSS 0.2%CVE-2026-115494MEDIUMCSRF protection could be tricked by forged X-Forwarded-Host header in KNIME Business HubEPSS 0.2%CVE-2026-115519LOWSensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business HubEPSS 0.2%CVE-2026-115657MEDIUMKNIME Analytics Platform logs credentials of configured proxy when used as an executorEPSS 0.1%