CVE-2025-11240 — Open redirect vulnerability in KNIME Business Hub

CVE-2025-11240

Open redirect vulnerability in KNIME Business Hub PUBLISHED

Description (CNA)

An open redirect vulnerability existed in KNIME Business Hub prior to version 1.16.0. An unauthenticated remote attacker could craft a link to a legitimate KNIME Business Hub installation which, when opened by the user, redirects the user to a page of the attackers choice. This might open the possibility for fishing or other similar attacks. The problem has been fixed in KNIME Business Hub 1.16.0.

Affected (CNA)

Vendor / product	Versions
KNIME / KNIME Business Hub	affected 0 before 1.16.0; unaffected 1.16.0

CWE

CWE-601

References

https://www.knime.com/security/advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.