Knime Knime Server
4 CVEs affecting Knime Knime Server. Latest disclosed: 2022-11-24. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-44726 | High | 8.8 | 2021-12-08 | KNIME Server before 4.13.4 allows XSS via the old WebPortal login page. |
CVE-2021-44725 | High | 7.5 | 2021-12-08 | KNIME Server before 4.13.4 allows directory traversal in a request for a client profile. |
CVE-2022-44748 | High | 7.1 | 2022-11-24 | A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arbitrary files being overwritten on the s… |
CVE-2021-45097 | Low | 2.9 | 2021-12-16 | KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without appropriate file a… |