Login Request a demo
KS
Product
Knime Server
by Knime · last CVE Nov 24, 2022
4
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 2Medium 2Low 0
Severity
All severities4Critical0High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Knime Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-44748
7.5
1%
Nov 24
A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arbitrary files being overwritten on the server's file system
Affected: 4.3.0 before 4.13.6; 4.14.0 before 4.14.3; 4.15.0 before 4.15.3
CVE-2021-44725
7.5
2%
Dec 8
KNIME Server before 4.13.4 allows directory traversal in a request for a client profile
Affected: before 4.13.4
CVE-2021-44726
6.1
1%
Dec 8
KNIME Server before 4.13.4 allows XSS via the old WebPortal login page
Affected: before 4.13.4
CVE-2021-45097
5.5
0%
Dec 16
KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without appropriate file access controls,…
Affected: through 4.12.5; 4.13 before 4.13.4
Showing 4