Knime Knime Analytics Platform
4 CVEs affecting Knime Knime Analytics Platform. Latest disclosed: 2023-10-12. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-31500 | High | 7.8 | 2022-06-02 | In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions. |
CVE-2023-5562 | Medium | 6.1 | 2023-10-12 | An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack. When KNIME Analytics Platform is used as an… |
CVE-2022-44749 | Medium | 5.5 | 2022-11-24 | A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being over… |
CVE-2021-45096 | Medium | 4.7 | 2021-12-16 | KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730. |