What’s Vulnerable › Vulnerabilities

CVE-2025-10355: Open redirection vulnerability in MOLGENIS EMX2

• Severity: medium (CVSS 5.1 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-23 · updated 2026-10-08
• Weakness: CWE-601

Description

Open redirection vulnerability in MOLGENIS EMX2 v11.14.0. This vulnerability allows an attacker to create a malicious URL using a manipulated redirection parameter, potentially leading users to phishing sites or other malicious destinations via “/%2f%2f<MALICIOUS_DOMAIN>”.

Affected products

• MOLGENIS EMX2: 11.14.0

References

• https://www.incibe.es/en/incibe-cert/notices/aviso/open-redirection-vulnerability-molgenis-emx2

Get alerted when CVE-2025-10355 or the next vulnerability affects your stack