KNIME Business Hub & Analytics Platform Multiple CVEs Advisory

Critical Vulnerability Information CVE-2015-3919: Cross-Site Scripting Vulnerability Affected Product: KNIME Business Hub Web pages CVSS v3.0 Score: 5.3 Version: CVS2/ASJN/KUACLAT/NPRAIRV/LVL/VLA/HSCGLSILANAI/NRUXDRE/MU/Atrie Affected Versions: KNIME Business Hub 1.3.3 and above Description: In KNIME Business Hub, attackers can execute cross-site scripting attacks by injecting malicious JavaScript code into specific URLs. CVE-2015-2197: Registration Permission Bypass Vulnerability Affected Product: KNIME Business Hub CVSS v3.0 Score: 8.7 Version: CVS4/ASJN/KUACLAT/NPRAIRV/LVL/VLA/HSCGLSILANAI/NRUXDRE/MU/Atrie Affected Versions: All versions of KNIME Business Hub Description: Attackers can exploit a vulnerability in the registration process to bypass permission checks, allowing them to create new administrator accounts. CVE-2015-2202: Hardcoded Password Vulnerability Affected Product: KNIME Business Hub CVSS v3.0 Score: 6.8 Version: CVS2/ASJN/KUACLAT/NPRAIRV/LVL/VLA/HSCGLSILANAI/NRUXDRE/MU/Atrie Affected Versions: All versions of KNIME Business Hub Description: The application contains a hardcoded random password, which attackers can exploit to gain unauthorized access. CVE-2014-8598: Service Deletion Vulnerability Affected Product: KNIME Business Hub CVSS v3.0 Score: 7.8 Version: CVS2/ASJN/KUACLAT/NPRAIRV/LVL/VLA/HSCGLSILANAI/NRUXDRE/MU/Atrie Affected Versions: KNIME Business Hub 1.3.0 and 1.0.1 Description: During certain job executions, services may be deleted, leading to impaired application functionality. CVE-2013-5952: Default Disabled Cross-Site Scripting Protection Affected Product: KNIME Server and KNIME Analytics Platform CVSS v3.0 Score: 6.1 Version: CVS2/ASJN/KUACLAT/NPRAIRV/LVL/VLA/HSCGLSILANAI/NRUXDRE/MU/Atrie Affected Versions: KNIME Analytics Platform 5.2.2 and below Description: By default, KNIME Analytics Platform allows cross-site scripting attacks, potentially leading to data leakage or tampering. ``` These critical details summarize the main vulnerabilities mentioned in the web screenshot, including their impact scope and severity levels.

Goal Reached Thanks to every supporter — we hit 100%!

KNIME Business Hub & Analytics Platform Multiple CVEs Advisory