CVE-2021-45096: Knime Analytics Platform

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730.

Affected products

• Knime Knime Analytics Platform: before 4.5.0 (fixed in 4.5.0)

Published 2021-12-16. Last modified 2026-06-17.