CVE-2021-44726: XSS
Published Dec 8, 2021
·Updated
KNIME Server before 4.13.4 allows XSS via the old WebPortal login page.
Affected Software
1 affected component
KNIME KNIME Server<4.13.4
Event History
Dec 8, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-44726.
2
What is the severity of CVE-2021-44726?
The severity of CVE-2021-44726 is high with a CVSS score of 6.1.
3
What software is affected by CVE-2021-44726?
KNIME Server versions up to and excluding 4.13.4 are affected by CVE-2021-44726.
4
How does CVE-2021-44726 exploit the vulnerability?
CVE-2021-44726 exploits the vulnerability by allowing cross-site scripting (XSS) attacks via the old WebPortal login page.
5
How can I fix CVE-2021-44726?
To fix CVE-2021-44726, update KNIME Server to version 4.13.4 or later.