Skip to contentKnime Business Hub vulnerabilities
- knime business hubSensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business HubCVE-2026-1155192.1 Low
- knime business hubUnrestricted network access between execution contexts in KNIME Business HubCVE-2026-1155176.4 Medium
- knime business hubDataApp links without login expose job information to other user in KNIME Business HubCVE-2026-1155026.3 Medium
- knime business hubWorkflow names may be leaked to unauthenticated users in KNIME Business HubCVE-2026-1154966.9 Medium
- knime business hubCSRF protection could be tricked by forged X-Forwarded-Host header in KNIME Business HubCVE-2026-1154945.3 Medium
- knime business hubLarge tables in data apps can bring down execution services in KNIME HubCVE-2026-1154545.3 Medium
- knime business hubAuth bypass in Apache Artemis allows reading all internal messagesCVE-2026-46495.3 Medium
- knime business hubJobs can be saved as workflows with wrong permissions on KNIME Business HubCVE-2025-142625.3 Medium
- knime business hubOpen redirect vulnerability in KNIME Business HubCVE-2025-112405.3 Medium
- knime business hubJob details are visible to all team members on KNIME Business HubCVE-2025-112392.3 Low
- knime business hubCross-site scripting vulnerabilities in KNIME Business Hub web pagesCVE-2025-30195.3 Medium
- knime business hubHard-coded password for object store of KNIME Business HubCVE-2025-24028.8 High
- knime business hubIngress-nginx vulnerability in KNIME Business HubCVE-2025-27878.7 High
- knime business hubDenial-of-service on KNIME Business Hub when certain jobs are executedCVE-2024-65987.1 High
- knime business hubKNIME Hub Web Application is vulnerable to clickjackingCVE-2023-31404.3 Medium
- knime business hubSensitive information disclosure in KNIME Hub Web ApplicationCVE-2023-25415.3 Medium