CVE-2025-11240CWE-601

CVE-2025-11240

High · published October 2, 2025

CVSS v3.1
7.2
EPSS
0%
Percentile
16.2
In the wild
Unconfirmed
What it is

An open redirect vulnerability existed in KNIME Business Hub prior to version 1.16.0. An unauthenticated remote attacker could craft a link to a legitimate KNIME Business Hub installation which, when opened by the user, redirects the user to a page of the attackers choice. This might open the possibility for fishing or other similar attacks. The problem has been fixed in KNIME Business Hub 1.16.0.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00255 · 16.2th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2025-10-02T17:15Z
Affected products (1)
ProductVersionsFixed in
knime/business_hub< 1.16.01.16.0
References (1)
https://www.knime.com/security/advisories · [email protected]
EPSS history
Timeline
  • 02 OCT 12:30Z
    Open redirect vulnerability in KNIME Business Hub
    cvelistv5