KNIME vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20233
3. 20241
4. 20256
5. 20268

Newest CVEs

• CVE-2026-115657

  KNIME Analytics Platform logs credentials of configured proxy when used as an executor

  KNIME · KNIME Analytics Platform

  Medium4.8
• CVE-2026-115519

  Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub

  KNIME · KNIME Business Hub

  Low2.1
• CVE-2026-115517

  Unrestricted network access between execution contexts in KNIME Business Hub

  KNIME · KNIME Business Hub

  Medium6.4
• CVE-2026-115502

  DataApp links without login expose job information to other user in KNIME Business Hub

  KNIME · KNIME Business Hub

  Medium6.3
• CVE-2026-115496

  Workflow names may be leaked to unauthenticated users in KNIME Business Hub

  KNIME · KNIME Business Hub

  Medium6.9
• CVE-2026-115494

  CSRF protection could be tricked by forged X-Forwarded-Host header in KNIME Business Hub

  KNIME · KNIME Business Hub

  Medium5.3
• CVE-2026-115454

  Large tables in data apps can bring down execution services in KNIME Hub

  KNIME · KNIME Business Hub

  Medium5.3
• CVE-2026-4649

  Auth bypass in Apache Artemis allows reading all internal messages

  KNIME · KNIME Business Hub

  Medium5.3
• CVE-2025-14262

  Jobs can be saved as workflows with wrong permissions on KNIME Business Hub

  KNIME · KNIME Business Hub

  Medium5.3
• CVE-2025-11240

  Open redirect vulnerability in KNIME Business Hub

  KNIME · KNIME Business Hub

  Medium5.3