BaselineWatch
Desk

CVE-2025-11239

2.3 low SSVC exploitation: none Analyzed

Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a job can see all information including in- and output data (if present).

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 2.3 · knimeNVD modified 2026-10-12 15:10

Affected (CPE criteria) 1

  • cpe:2.3:a:knime:business_hub:*:*:*:*:*:*:*:*

References 1