Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24

Export CSV
CVE-2021-45097

KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without appropriate file access controls, allowing all local users to read its content.

CVSS 3.1 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Knime
Products
Knime Server
CVE-2021-45096

KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730.

CVSS 3.1 · 4.7 Medium EPSS 1.1% KEV · Not listed
Vendors
Knime
Products
Knime Analytics Platform
CVE-2021-44725

KNIME Server before 4.13.4 allows directory traversal in a request for a client profile.

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Knime
Products
Knime Server