Lucene search
+L

177 matches found

Positive Technologies
Positive Technologies
added 2025/03/26 12:00 a.m.14 views

PT-2025-13007 · Unknown +1 · Ingress-Nginx +2

Name of the Vulnerable Software and Affected Versions: KNIME Business Hub versions prior to 1.10.4 KNIME Business Hub versions prior to 1.11.4 KNIME Business Hub versions prior to 1.12.4 KNIME Business Hub versions prior to 1.13.3 Description: The issue affects the ingress-nginx component,...

8.7CVSS6.3AI score0.00482EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2025/03/26 12:00 a.m.8 views

KNIME Business Hub 安全漏洞

KNIME Business Hub is KNIME's enterprise software for data science automation, deployment modeling, team collaboration and management workflows. KNIME Business Hub has a security vulnerability that stems from an Ingress-nginx component that could lead to a Kubernetes cluster takeover...

8.8CVSS6.7AI score0.00482EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/06 3:32 a.m.14 views

CVE-2021-44725

KNIME Server before 4.13.4 allows directory traversal in a request for a client profile...

7.5CVSS6.8AI score0.01529EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/06 3:25 a.m.13 views

CVE-2021-44726

KNIME Server before 4.13.4 allows XSS via the old WebPortal login page...

8.8CVSS5.8AI score0.00734EPSS
SaveExploits0
Circl
Circl
added 2024/07/09 4:52 p.m.6 views

CVE-2024-6598

creationtimestamp| type| source ---|---|--- 2024-07-09 16:52:08+00:00| seen| https://t.me/cvedetector/350 2026-03-25 03:00:10+00:00| seen| https://www.knime.com/security/advisoriesCVE-2026-4649...

7.1CVSS5AI score0.00544EPSS
SaveExploits0References2
NVD
NVD
added 2024/07/09 2:15 p.m.22 views

CVE-2024-6598

A denial-of-service attack is possible through the execution functionality of KNIME Business Hub 1.10.0 and 1.10.1. It allows an authenticated attacker with job execution privileges to execute a job that causes internal messages to pile up until there are no more resources available for processin...

7.1CVSS0.00544EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/09 2:15 p.m.8 views

CVE-2024-6598

A denial-of-service attack is possible through the execution functionality of KNIME Business Hub 1.10.0 and 1.10.1. It allows an authenticated attacker with job execution privileges to execute a job that causes internal messages to pile up until there are no more resources available for processin...

6.5CVSS5.9AI score0.00544EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/09 1:41 p.m.54 views

CVE-2024-6598

KNIME Business Hub versions 1.10.0 and 1.10.1 are affected by a denial-of-service vulnerability in the execution path. An authenticated attacker with job execution privileges can run a job that floods internal messages, exhausting resources and causing outage of most functionality. Recovery requi...

7.1CVSS6.6AI score0.00544EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/07/09 1:41 p.m.32 views

CVE-2024-6598 Denial-of-service on KNIME Business Hub when certain jobs are executed

A denial-of-service attack is possible through the execution functionality of KNIME Business Hub 1.10.0 and 1.10.1. It allows an authenticated attacker with job execution privileges to execute a job that causes internal messages to pile up until there are no more resources available for processin...

7.1CVSS0.00544EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/09 1:41 p.m.27 views

CVE-2024-6598 Denial-of-service on KNIME Business Hub when certain jobs are executed

A denial-of-service attack is possible through the execution functionality of KNIME Business Hub 1.10.0 and 1.10.1. It allows an authenticated attacker with job execution privileges to execute a job that causes internal messages to pile up until there are no more resources available for processin...

7.1CVSS7.2AI score0.00544EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/07/09 12:00 a.m.10 views

PT-2024-37746 · Knime · Knime Business Hub

Name of the Vulnerable Software and Affected Versions: KNIME Business Hub versions 1.10.0 through 1.10.1 Description: A denial-of-service attack is possible through the execution functionality of KNIME Business Hub. It allows an authenticated attacker with job execution privileges to execute a jo...

7.1CVSS7.4AI score0.00544EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/07/09 12:00 a.m.10 views

KNIME Business Hub Security Vulnerability

KNIME Business Hub is KNIME's enterprise software for data science automation, deployment modeling, team collaboration and management workflows. A security vulnerability exists in KNIME Business Hub versions 1.10.0 and 1.10.1 that stems from vulnerability to denial-of-service attacks, which can...

7.1CVSS6.8AI score0.00544EPSS
SaveExploits0References2
Circl
Circl
added 2023/10/13 12:23 a.m.9 views

CVE-2023-5562

creationtimestamp| type| source ---|---|--- 2023-10-13 00:23:25+00:00| seen| https://t.me/cibsecurity/72203 2026-03-25 03:00:10+00:00| seen| https://www.knime.com/security/advisoriesCVE-2026-4649...

6.1CVSS6.1AI score0.00311EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/12 8:15 p.m.9 views

CVE-2023-5562

An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack. When KNIME Analytics Platform is used as an executor for either KNIME Server or KNIME Business Hub several JavaScript-based view nodes do not sanitize the data that is displayed by...

6.1CVSS5.8AI score0.00311EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/12 8:15 p.m.37 views

CVE-2023-5562

An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack. When KNIME Analytics Platform is used as an executor for either KNIME Server or KNIME Business Hub several JavaScript-based view nodes do not sanitize the data that is displayed by...

6.1CVSS6.1AI score0.00311EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/12 8:15 p.m.23 views

Cross site scripting

An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack. When KNIME Analytics Platform is used as an executor for either KNIME Server or KNIME Business Hub several JavaScript-based view nodes do not sanitize the data that is displayed by...

5.8CVSS6AI score0.00311EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/12 7:00 p.m.46 views

CVE-2023-5562 Unsafe default allows for cross-site scripting attacks in KNIME Server and KNIME Business Hub

An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack. When KNIME Analytics Platform is used as an executor for either KNIME Server or KNIME Business Hub several JavaScript-based view nodes do not sanitize the data that is displayed by...

6.1CVSS6.3AI score0.00311EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/10/12 7:00 p.m.15 views

CVE-2023-5562 Unsafe default allows for cross-site scripting attacks in KNIME Server and KNIME Business Hub

An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack. When KNIME Analytics Platform is used as an executor for either KNIME Server or KNIME Business Hub several JavaScript-based view nodes do not sanitize the data that is displayed by...

6.1CVSS6.3AI score0.00311EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/12 7:00 p.m.71 views

CVE-2023-5562

KNIME Analytics Platform before 5.2.0 is vulnerable to cross-site scripting when used as an executor for KNIME Server or KNIME Business Hub. The root cause is an unsafe default configuration where JavaScript-based view nodes do not sanitize data by default, allowing inline JavaScript to run in th...

6.1CVSS6.1AI score0.00311EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/12 12:00 a.m.10 views

Knime Analytics Platform Cross-Site Scripting Vulnerability

Knime Analytics Platform is a free and open source data analytics, reporting and integration platform from Knime, Switzerland. A cross-site scripting vulnerability exists in KNIME Analytics Platform versions prior to 5.2.0, which arises from insecure default settings that allow cross-site scripti...

6.1CVSS6.1AI score0.00311EPSS
SaveExploits0References2
Rows per page
Query Builder