Improper input validation in IBM Websphere Application Server
CVE-2011-1355
Open redirect vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage parameter.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.019 (77.1th percentile) — read the EPSS interpretation.
Affected products
- Ibm Websphere_application_server — versions 6.1, 6.1.0, 6.1.0.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)
- cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)
- cve@mitre.org (vdb-entry, x_refsource_XF)