Vulnerability in Knime Business_hub
CVE-2025-14262
A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other users as if there were saved by the job owner. The attacker must have permissions to access the jobs but then they wer…
EPSS: 0.002 (5.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Knime Business_hub
- Knime Business Hub — versions 0, 1.17.0
Weakness classification (CWE)
References
- security@knime.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2025-14262?
- CVE-2025-14262 is a medium-severity vulnerability in Knime Business_hub, classified under CWE-708. CVSS score: 4.3/10. Published 2025-12-08.
- How severe is CVE-2025-14262?
- Medium severity. CVSS v3 base score is 4.3 out of 10.