CVE-2025-2787
Last modified
CVE-2025-2787 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. KNIME Business Hub is affected by the Ingress-nginx CVE-2025-1974 ( a.k.a IngressNightmare ) vulnerability which affects the ingress-nginx component. In the worst case a complete takeover of the Kubernetes cluster is possible. EPSS estimates a 0.47% chance of exploitation in the next 30 days.
Description
KNIME Business Hub is affected by the Ingress-nginx CVE-2025-1974 ( a.k.a IngressNightmare ) vulnerability which affects the ingress-nginx component. In the worst case a complete takeover of the Kubernetes cluster is possible. Since the affected component is only reachable from within the cluster, i.e. requires an authenticated user, the severity in the context of KNIME Business Hub is slightly lower. Besides applying the publicly known workarounds, we strongly recommend updating to one of the following versions of KNIME Business Hub: * 1.13.3 or above * 1.12.4 or above * 1.11.4 or above * 1.10.4 or above *
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Amber
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Knime | Business Hub | >= 1.10.0, < 1.10.4 |
| Knime | Business Hub | >= 1.11.0, < 1.11.4 |
| Knime | Business Hub | >= 1.12.0, < 1.12.4 |
| Knime | Business Hub | >= 1.13.0, < 1.13.3 |
References
- https://www.knime.com/security-advisory-cve-2025-2787Mitigation, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-2787?
How severe is CVE-2025-2787?
How do I fix CVE-2025-2787?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-27850The locally served web site on the Garmin WDU (v1 1.4.6 and …7.5
- CVE-2025-27851The locally served web site on the Garmin WDU (v1 1.4.6 and …9.3
- CVE-2025-27852The locally served web site on the Garmin WDU (v1 1.4.6 and …5
- CVE-2025-27853The locally served web site on the Garmin WDU (v1 1.4.6 and …7.3
- CVE-2025-2786A flaw was found in Tempo Operator, where it creates a Servi…4.3
- CVE-2025-27867Improper Neutralization of Input During Web Page Generation …5.6
- CVE-2025-27888Severity: medium (5.8) / important Server-Side Request Forg…5.4
- CVE-2025-27889Wing FTP Server before 7.4.4 does not properly validate and …8.8
- CVE-2025-2789The MultiVendorX – Empower Your WooCommerce Store with a Dyn…6.5
- CVE-2025-27891An issue was discovered in Samsung Mobile Processor, Wearabl…9.1
- CVE-2025-27892Shopware prior to version 6.5.8.13 is affected by a SQL inje…6.8
- CVE-2025-27893In Archer Platform 6 through 6.14.00202.10024, an authentica…4.3
Are you affected by CVE-2025-2787?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST