CVE-2021-45096

KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730

Medium · published December 16, 2021

CVSS v3.1
4.7
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:C/UI:R
CVSS v4.0
Not supplied
EPSS
0.01106 · 65.5th percentile
Published
2021-12-16T00:00Z
EPSS history
Timeline
  • 16 DEC 00:00Z
    KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730
    cvelistv5