Improper input validation in Cisco Emergency_responder
CVE-2014-2117
Multiple open redirect vulnerabilities in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters, aka Bug ID CSCun37909.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.004 (59.6th percentile) — read the EPSS interpretation.
Affected products
- Cisco Emergency_responder
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- 1030019 (vdb-entry, x_refsource_SECTRACK)
- 20140403 Cisco Emergency Responder Open Redirect Vulnerability (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- 66634 (vdb-entry, x_refsource_BID)