Product by KNIME
Knime Business Hub
16 known vulnerabilities in Knime Business Hub (KNIME), 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2026-115496 | Workflow names may be leaked to unauthenticated users in KNIME Business Hub | — | |
| Medium | CVE-2026-115517 | Unrestricted network access between execution contexts in KNIME Business Hub | — | |
| High | CVE-2025-2787 | Ingress-nginx vulnerability in KNIME Business Hub | 8.8 | |
| Medium | CVE-2026-115502 | DataApp links without login expose job information to other user in KNIME Business Hub | — | |
| Medium | CVE-2026-115454 | Large tables in data apps can bring down execution services in KNIME Hub | — | |
| High | CVE-2025-2402 | Hard-coded password for object store of KNIME Business Hub | 8.6 | |
| High | CVE-2024-6598 | Denial-of-service on KNIME Business Hub when certain jobs are executed | 6.5 | |
| Medium | CVE-2026-115494 | CSRF protection could be tricked by forged X-Forwarded-Host header in KNIME Business Hub | — | |
| Medium | CVE-2026-4649 | Auth bypass in Apache Artemis allows reading all internal messages | — | |
| Medium | CVE-2023-2541 | Sensitive information disclosure in KNIME Hub Web Application | 5.3 | |
| High | CVE-2025-11240 | Open redirect vulnerability in KNIME Business Hub | 7.2 | |
| High | CVE-2025-3019 | Cross-site scripting vulnerabilities in KNIME Business Hub web pages | 7.2 | |
| Low | CVE-2026-115519 | Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub | — | |
| Medium | CVE-2025-14262 | Jobs can be saved as workflows with wrong permissions on KNIME Business Hub | 4.3 | |
| Medium | CVE-2023-3140 | KNIME Hub Web Application is vulnerable to clickjacking | 4.3 | |
| Medium | CVE-2025-11239 | Job details are visible to all team members on KNIME Business Hub | 4.3 |