İçeriğe atla
Noroxi

KNIME kayıtları

knime üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%64,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

17 kayıt
  • CVE-2025-2402
    35İzleyin

    Hard-coded password for object store of KNIME Business Hub

    YüksekCVSS 8,8İstismar yokEPSS %0

    knime · business hub31 Mar 2025

  • CVE-2025-2787
    34İzleyin

    Ingress-nginx vulnerability in KNIME Business Hub

    YüksekCVSS 8,7İstismar yokEPSS %0

    knime · business hub26 Mar 2025

  • CVE-2022-31500
    31İzleyin

    In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions.

    YüksekCVSS 7,8İstismar yokEPSS %0

    knime · knime analytics platform2 Haz 2022

  • CVE-2021-44725
    30İzleyin

    KNIME Server before 4.13.4 allows directory traversal in a request for a client profile.

    YüksekCVSS 7,5İstismar yokEPSS %2

    knime · knime server8 Ara 2021

  • CVE-2022-44748
    30İzleyin

    Uploading workflows to KNIME Server may override arbitrary file system contents

    YüksekCVSS 7,5İstismar yokEPSS %1

    knime · knime server24 Kas 2022

  • CVE-2024-6598
    28İzleyin

    Denial-of-service on KNIME Business Hub when certain jobs are executed

    YüksekCVSS 7,1İstismar yokEPSS %1

    knime · business hub9 Tem 2024

  • CVE-2022-44749
    28İzleyin

    Opening workflows from untrusted resources may override arbitrary file system contents

    YüksekCVSS 7,0İstismar yokEPSS %0

    knime · knime analytics platform24 Kas 2022

  • CVE-2021-44726
    24İzleyin

    KNIME Server before 4.13.4 allows XSS via the old WebPortal login page.

    OrtaCVSS 6,1İstismar yokEPSS %1

    knime · knime server8 Ara 2021

  • CVE-2023-5562
    24İzleyin

    Unsafe default allows for cross-site scripting attacks in KNIME Server and KNIME Business Hub

    OrtaCVSS 6,1İstismar yokEPSS %0

    knime · knime analytics platform12 Eki 2023

  • CVE-2021-45097
    22İzleyin

    KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without

    OrtaCVSS 5,5İstismar yokEPSS %0

    knime · knime server16 Ara 2021

  • CVE-2023-2541
    21İzleyin

    Sensitive information disclosure in KNIME Hub Web Application

    OrtaCVSS 5,3İstismar yokEPSS %1

    knime · business hub7 Haz 2023

  • CVE-2025-3019
    21İzleyin

    Cross-site scripting vulnerabilities in KNIME Business Hub web pages

    OrtaCVSS 5,3İstismar yokEPSS %0

    knime · business hub31 Mar 2025

  • CVE-2025-11240
    21İzleyin

    Open redirect vulnerability in KNIME Business Hub

    OrtaCVSS 5,3İstismar yokEPSS %0

    knime · business hub2 Eki 2025

  • CVE-2025-14262
    21İzleyin

    Jobs can be saved as workflows with wrong permissions on KNIME Business Hub

    OrtaCVSS 5,3İstismar yokEPSS %0

    knime · business hub8 Ara 2025

  • CVE-2021-45096
    17İzleyin

    KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730

    OrtaCVSS 4,3İstismar yokEPSS %1

    knime · knime analytics platform16 Ara 2021

  • CVE-2023-3140
    17İzleyin

    KNIME Hub Web Application is vulnerable to clickjacking

    OrtaCVSS 4,3İstismar yokEPSS %0

    knime · business hub7 Haz 2023

  • CVE-2025-11239
    9İzleyin

    Job details are visible to all team members on KNIME Business Hub

    DüşükCVSS 2,3İstismar yokEPSS %0

    knime · business hub2 Eki 2025