Vulnerability in IBM Websphere Portal

CVE-2014-3054

Multiple open redirect vulnerabilities in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

EPSS: 0.018 (76.6th percentile) — read the EPSS interpretation.

Affected products

Ibm Websphere_portal — versions 7.0.0.0, 7.0.0.1, 7.0.0.2
Ibm Websphere_portal_unified_task_list_portlet — versions 6.0.1
N/a — versions n/a

References

psirt@us.ibm.com (x_refsource_SECUNIA, third-party-advisory)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)