[ Vendor · 7 CVEs ]
KNIME
CVEs affecting KNIME published in the last 30 days, plus any KNIME CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-115517 | 22 Oct 2026 | CVSS 6.4 | KNIME Business HubUnrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open… | |
| CVE-2026-115519 | 22 Oct 2026 | CVSS 2.1 | KNIME Business HubMissing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise… | |
| CVE-2026-115516 | 22 Oct 2026 | CVSS 6.9 | KNIME Business Hub SaaSAn incorrect authorization issue exposes basic account information to unauthorized remote users in KNIME Business Hub SaaS before version 1.19.0. A… | |
| CVE-2026-115502 | 22 Oct 2026 | CVSS 6.3 | KNIME Business HubA missing authorization check allows anyone having access to a "link without login" for a DataApp to list and potentially access jobs of other users… | |
| CVE-2026-115454 | 22 Oct 2026 | CVSS 5.3 | KNIME Business HubAn excessive resource allocation issue in the remote workflow editing capabilities of KNIME Business Hub prior to version 1.19.0 allows a… | |
| CVE-2026-115494 | 22 Oct 2026 | CVSS 5.3 | KNIME Business HubA flaw in the cross-site request forgery (CSRF) prevention of KNIME Business Hub prior to version 1.19.0 allows an authenticated attacker to perform… | |
| CVE-2026-115496 | 22 Oct 2026 | CVSS 6.9 | KNIME Business HubOverly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote… |