KNIME KNIME Business Hub

Name: KNIME KNIME Business Hub
Brand: KNIME

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical4high5medium0low

updated 2026-10-27

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-2541US	medium5.3	0.64% (51st)	—	1.4.0	2023-06-07	1.0.0 → 1.4.0
CVE-2024-6598US	medium6.5	0.54% (45th)	—	1.10.2	2024-07-09	1.10.0 → 1.10.2
CVE-2025-2787US	high8.8	0.50% (43rd)	—	no fix	2025-03-26	4 versions
CVE-2023-3140US	medium4.3	0.40% (34th)	—	1.4.0	2023-06-07	1.0.0 → 1.4.0
CVE-2025-2402US	high8.6OT elevated	0.39% (33rd)	—	1.12.3	2025-03-31	4 versions
CVE-2026-4649US	—OT elevated	0.38% (32nd)	—	1.16.3	2026-03-24	3 versions
CVE-2025-3019US	high7.2	0.27% (19th)	—	1.13.3	2025-03-31	2 versions
CVE-2025-11240US	high7.2	0.26% (17th)	—	1.16.0	2025-10-02	0 → 1.16.0
CVE-2025-11239US	medium4.3OT elevated	0.21% (11th)	—	1.16.0	2025-10-02	0 → 1.16.0
CVE-2025-14262US	medium4.3	0.18% (8th)	—	1.17.0	2025-12-08	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-1021Improper Restriction of Rendered UI Layers or Frames1 CVEs
CWE-259Use of Hard-coded Password1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-497Exposure of Sensitive System Information to an Unauthorized Control Sphere1 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')1 CVEs
CWE-708Incorrect Ownership Assignment1 CVEs
CWE-770Allocation of Resources Without Limits or Throttling1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.