Vulnerability · Published Oct 2, 2025 · Assigned by KNIME
CVE-2025-11240Open redirect vulnerability in KNIME Business Hub
Medium 5.3
In plain English
A medium-severity open redirect in KNIME Business Hub from KNIME. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).
Official description
An open redirect vulnerability existed in KNIME Business Hub prior to version 1.16.0. An unauthenticated remote attacker could craft a link to a legitimate KNIME Business Hub installation which, when opened by the user, redirects the user to a page of the attackers choice. This might open the possibility for fishing or other similar attacks. The problem has been fixed in KNIME Business Hub 1.16.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| KNIME | KNIME Business Hub | 0 – before 1.16.0 |
Weakness: CWE-601 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/U:Green