CVE-2025-11239

Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a job can see all information including in- and output data (if present).

• CWE-863

• https://www.knime.com/security/advisoriesVendor Advisory

Published

Oct 2, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11232To trigger the issue, three configuration parameters must ha…7.5
• CVE-2025-11233Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3…6.3
• CVE-2025-11234A flaw was found in QEMU. If the QIOChannelWebsock object is…7.5
• CVE-2025-11235Unverified Password Change vulnerability in Progress MOVEit …7.5
• CVE-2025-11237The Make Email Customizer for WooCommerce WordPress plugin t…5.3
• CVE-2025-11238The Watu Quiz plugin for WordPress is vulnerable to Stored C…7.2
• CVE-2025-11240An open redirect vulnerability existed in KNIME Business Hub…7.2
• CVE-2025-11241The Yoast SEO Premium plugin for WordPress is vulnerable to …6.4
• CVE-2025-11242Server-Side Request Forgery (SSRF) vulnerability in Teknolis…9.8
• CVE-2025-11243Allocation of Resources Without Limits or Throttling vulnera…8.3
• CVE-2025-11244The Password Protected plugin for WordPress is vulnerable to…3.7
• CVE-2025-11246GitLab has remediated an issue in GitLab CE/EE affecting all…5.4