Lucene search
MitreCVELIST:CVE-2021-45096HistoryDec 16, 2021 - 12:00 a.m.
CVE-2021-45096
2021-12-1600:00:00
mitre
www.cve.org
1
knime analytics platform
4.5.0
xxe vulnerability
crafted workflow file
ap-17730
CVSS3
4.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
AI Score
5
Confidence
High
EPSS
0.002
Percentile
53.9%
KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730.
Related
cnvd
cnvd
Knime Analytics Platform code issue vulnerability
2021-12-17 00:00:00
cve
cve
CVE-2021-45096
2021-12-16 05:15:08
prion
prion
Sql injection
2021-12-16 05:15:00
nvd
nvd
CVE-2021-45096
2021-12-16 05:15:08
CVSS3
4.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
AI Score
5
Confidence
High
EPSS
0.002
Percentile
53.9%
Related for CVELIST:CVE-2021-45096