CVE-2026-115519 — Vulnerability intelligence
KNIME — KNIME Business Hub
Published:
- CVSS
- 2.1
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vulnerability or a man-in-the-middle attack are present. A workaround is not possible.