Vulnerabilities (CVE)

Filtered by vendor Knime Subscribe
Filtered by product Knime Server
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-45097 1 Knime 1 Knime Server 2023-08-08 2.1 LOW 5.5 MEDIUM
KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without appropriate file access controls, allowing all local users to read its content.
CVE-2021-44726 1 Knime 1 Knime Server 2021-12-08 4.3 MEDIUM 6.1 MEDIUM
KNIME Server before 4.13.4 allows XSS via the old WebPortal login page.