knime business hub

Name: knime business hub
Brand: knime

productUS

cpe:2.3:a:knime:business_hub:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical4high5medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-2541US	medium5.3	0.64% (51st)	—	1.4.0	2023-06-07	< 1.4.0
CVE-2024-6598US	medium6.5	0.54% (45th)	—	1.10.2	2024-07-09	1.10.0 → 1.10.2
CVE-2025-2787US	high8.8	0.50% (43rd)	—	1.12.4	2025-03-26	4 versions
CVE-2023-3140US	medium4.3	0.40% (34th)	—	1.4.0	2023-06-07	< 1.4.0
CVE-2025-2402US	high8.6OT elevated	0.39% (33rd)	—	1.13.2	2025-03-31	4 versions
CVE-2025-3019US	high7.2	0.27% (20th)	—	1.12.4	2025-03-31	2 versions
CVE-2025-11240US	high7.2	0.26% (17th)	—	1.16.0	2025-10-02	< 1.16.0
CVE-2025-11239US	medium4.3OT elevated	0.21% (11th)	—	1.16.0	2025-10-02	< 1.16.0
CVE-2025-14262US	medium4.3	0.18% (8th)	—	1.17.0	2025-12-08	< 1.17.0

The flaw types (CWEs) most of these CVEs share.

CWE-1021Improper Restriction of Rendered UI Layers or Frames1 CVEs
CWE-259Use of Hard-coded Password1 CVEs
CWE-497Exposure of Sensitive System Information to an Unauthorized Control Sphere1 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')1 CVEs
CWE-708Incorrect Ownership Assignment1 CVEs
CWE-770Allocation of Resources Without Limits or Throttling1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.