Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-09805
HistoryDec 12, 2021 - 12:00 a.m.

KNIME Cross-Site Scripting Vulnerability

2021-12-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
knime
cross-site scripting
vulnerability
data validation
web application
attackers
client-side code

EPSS

0.001

Percentile

36.7%

A cross-site scripting vulnerability exists in Knime, the Swiss company’s enterprise software for putting data science workflows into production. knime stems from the lack of proper validation of client-side data by the WEB application, which can be exploited by attackers to execute client-side code.

EPSS

0.001

Percentile

36.7%

Related for CNVD-2022-09805