Knime
Knime Analytics Platform: vulnerabilidades y CVE
Knime Analytics Platform tiene 4 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-5562 | Media (6.1) | 0.31% | — | 12 oct 2023 | An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack. When KNIME Analytics Platform is used as an executor for either KNIME Server or KNIME Business Hub… |
| CVE-2022-44749 | Alta (7) | 0.43% | — | 24 nov 2022 | A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overwritten on the user's system. This vulnerability is also… |
| CVE-2022-31500 | Alta (7.8) | 0.22% | — | 2 jun 2022 | In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions. |
| CVE-2021-45096 | Media (4.3) | 1.1% | — | 16 dic 2021 | KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730. |