Vulnerabilities > Knime > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-11-24 | CVE-2022-44748 | Path Traversal vulnerability in Knime Server 4.12.5/4.13.3/4.13.4 A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arbitrary files being overwritten on the server's file system. | 7.5 |
2022-11-24 | CVE-2022-44749 | Path Traversal vulnerability in Knime Analytics Platform A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overwritten on the user's system. | 7.0 |
2022-06-02 | CVE-2022-31500 | Incorrect Default Permissions vulnerability in Knime Analytics Platform In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions. | 7.8 |
2021-12-08 | CVE-2021-44725 | Path Traversal vulnerability in Knime Server 4.12.5/4.13.3 KNIME Server before 4.13.4 allows directory traversal in a request for a client profile. | 7.5 |