Open Redirect Vulnerability in KNIME Business Hub Affects User Security
CVE-2025-11240

5.3MEDIUM

Key Information:

Vendor

Knime

Status
Knime Business Hub
Vendor
CVE Published:
2 October 2025

What is CVE-2025-11240?

An open redirect vulnerability was identified in KNIME Business Hub prior to version 1.16.0, allowing unauthenticated remote attackers to manipulate links leading to legitimate installations, potentially redirecting users to malicious websites. This flaw raises significant concerns for user security, leading to risks such as phishing attacks. Users are strongly advised to upgrade to version 1.16.0, where this issue has been addressed.

Affected Version(s)

KNIME Business Hub 0 < 1.16.0

KNIME Business Hub 1.16.0

References

https://www.knime.com/security/advisories

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-11240 : Open Redirect Vulnerability in KNIME Business Hub Affects User Security