# KNIME Business Hub.

Every CVE that names KNIME Business Hub among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub](https://agentprime.io/advisories/CVE-2026-115519.md)
  `CVE-2026-115519` · CVE record: KNIME KNIME Business Hub · CVSS 2.1 Low · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-614, CWE-1004
- [Unrestricted network access between execution contexts in KNIME Business Hub](https://agentprime.io/advisories/CVE-2026-115517.md)
  `CVE-2026-115517` · CVE record: KNIME KNIME Business Hub · CVSS 6.4 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-653
- [DataApp links without login expose job information to other user in KNIME Business Hub](https://agentprime.io/advisories/CVE-2026-115502.md)
  `CVE-2026-115502` · CVE record: KNIME KNIME Business Hub · CVSS 6.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Broken access control
- [Workflow names may be leaked to unauthenticated users in KNIME Business Hub](https://agentprime.io/advisories/CVE-2026-115496.md)
  `CVE-2026-115496` · CVE record: KNIME KNIME Business Hub · CVSS 6.9 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Information disclosure
- [CSRF protection could be tricked by forged X-Forwarded-Host header in KNIME Business Hub](https://agentprime.io/advisories/CVE-2026-115494.md)
  `CVE-2026-115494` · CVE record: KNIME KNIME Business Hub · CVSS 5.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Cross-site request forgery (CSRF)
- [Large tables in data apps can bring down execution services in KNIME Hub](https://agentprime.io/advisories/CVE-2026-115454.md)
  `CVE-2026-115454` · CVE record: KNIME KNIME Business Hub · CVSS 5.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [Auth bypass in Apache Artemis allows reading all internal messages](https://agentprime.io/advisories/CVE-2026-4649.md)
  `CVE-2026-4649` · CVE record: KNIME KNIME Business Hub · CVSS 5.3 Medium · Not analysed yet · Published 24 Mar 2026 · Tags: Authentication bypass
- [Jobs can be saved as workflows with wrong permissions on KNIME Business Hub](https://agentprime.io/advisories/CVE-2025-14262.md)
  `CVE-2025-14262` · CVE record: KNIME KNIME Business Hub · CVSS 5.3 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-708
- [Open redirect vulnerability in KNIME Business Hub](https://agentprime.io/advisories/CVE-2025-11240.md)
  `CVE-2025-11240` · CVE record: KNIME KNIME Business Hub · CVSS 5.3 Medium · Not analysed yet · Published 2 Oct 2025 · Tags: Open redirect
- [Job details are visible to all team members on KNIME Business Hub](https://agentprime.io/advisories/CVE-2025-11239.md)
  `CVE-2025-11239` · CVE record: KNIME KNIME Business Hub · CVSS 2.3 Low · Not analysed yet · Published 2 Oct 2025 · Tags: Broken access control
- [Cross-site scripting vulnerabilities in KNIME Business Hub web pages](https://agentprime.io/advisories/CVE-2025-3019.md)
  `CVE-2025-3019` · CVE record: KNIME KNIME Business Hub · CVSS 5.3 Medium · Not analysed yet · Published 31 Mar 2025 · Tags: Cross-site scripting (XSS)
- [Hard-coded password for object store of KNIME Business Hub](https://agentprime.io/advisories/CVE-2025-2402.md)
  `CVE-2025-2402` · CVE record: KNIME KNIME Business Hub · CVSS 8.8 High · Not analysed yet · Published 31 Mar 2025 · Tags: Hard-coded credentials
- [Ingress-nginx vulnerability in KNIME Business Hub](https://agentprime.io/advisories/CVE-2025-2787.md)
  `CVE-2025-2787` · CVE record: KNIME KNIME Business Hub · CVSS 8.7 High · Not analysed yet · Published 26 Mar 2025 · Tags: Code injection
- [Denial-of-service on KNIME Business Hub when certain jobs are executed](https://agentprime.io/advisories/CVE-2024-6598.md)
  `CVE-2024-6598` · CVE record: KNIME KNIME Business Hub · CVSS 7.1 High · Not analysed yet · Published 9 Jul 2024 · Tags: Denial of service
- [KNIME Hub Web Application is vulnerable to clickjacking](https://agentprime.io/advisories/CVE-2023-3140.md)
  `CVE-2023-3140` · CVE record: KNIME KNIME Business Hub · CVSS 4.3 Medium · Not analysed yet · Published 7 Jun 2023 · Tags: CWE-1021
- [Sensitive information disclosure in KNIME Hub Web Application](https://agentprime.io/advisories/CVE-2023-2541.md)
  `CVE-2023-2541` · CVE record: KNIME KNIME Business Hub · CVSS 5.3 Medium · Not analysed yet · Published 7 Jun 2023 · Tags: Information disclosure

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=knime-business-hub>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/knime-business-hub/>. Everything for agents: <https://agentprime.io/llms.txt>.