Vulnerability in IBM Websphere Portal

CVE-2015-1921

Open redirect vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF17 and 8.5.0 before CF06 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.

EPSS: 0.024 (82.5th percentile) — read the EPSS interpretation.

Affected products

Ibm Websphere_portal — versions 8.0.0.0, 8.0.0.1, 8.5.0.0
N/a — versions n/a

References

psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)