CVE-2023-3140

Missing HTTP headers (X-Frame-Options, Content-Security-Policy) in KNIME Business Hub before 1.4.0 has left users vulnerable to click jacking. Clickjacking is an attack that occurs when an attacker uses a transparent iframe in a window to trick a user into clicking on an actionable item, such as a button or link, to another server in which they have an identical webpage. The attacker essentially hijacks the user activity intended for the original server and sends them to the other server.

• CWE-1021
• CWE-1021

• https://www.knime.com/security/advisories#CVE-2023-3140Vendor Advisory
• https://www.knime.com/security/advisories#CVE-2023-3140Vendor Advisory

Published

Jun 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-31361A DLL hijacking vulnerability in AMD Integrated Management T…7.3
• CVE-2023-31364Improper handling of direct memory writes in the input-outpu…8.3
• CVE-2023-31365An integer overflow in the SMU could allow a privileged atta…3.9
• CVE-2023-31366Improper input validation in AMD μProf could allow an attack…5.5
• CVE-2023-3138A vulnerability was found in libX11. The security flaw occur…7.5
• CVE-2023-3139The Protect WP Admin WordPress plugin before 4.0 discloses t…6.1
• CVE-2023-31403SAP Business One installation - version 10.0, does not perfo…8
• CVE-2023-31404Under certain conditions, SAP BusinessObjects Business Intel…5
• CVE-2023-31405SAP NetWeaver AS for Java - versions ENGINEAPI 7.50, SERVERC…5.3
• CVE-2023-31406Due to insufficient input validation, SAP BusinessObjects Bu…6.1
• CVE-2023-31407SAP Business Planning and Consolidation - versions 740, 750,…5.4
• CVE-2023-31408Cleartext Storage of Sensitive Information in SICK FTMg AIR …7.5