CWE-601 · URL Redirection to Untrusted Site (Open Redirect) (page 17)
Page 17 of 17 — CVEs classified under CWE-601, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-9058 | Medium | 6.1 | 2017-05-03 | Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary web sites and conduct… |
CVE-2017-3528 | Medium | 5.4 | 2017-04-24 | Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datepicker, etc.)). Supp… |
CVE-2016-4075 | Medium | 6.1 | 2017-04-21 | Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, related to the about:blank URL. |
CVE-2016-1213 | Medium | 6.1 | 2017-04-20 | The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites. |
CVE-2016-0228 | Medium | 5.4 | 2017-04-17 | IBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in various scripts. An attacker… |
CVE-2016-4334 | Medium | 6.1 | 2017-04-10 | Jive before 2016.3.1 has an open redirect from the external-link.jspa page. |
CVE-2017-6604 | Medium | 6.1 | 2017-04-07 | A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a use… |
CVE-2017-3889 | Medium | 6.1 | 2017-04-07 | A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to redirect a user to a undesired… |
CVE-2017-7234 | Medium | 6.1 | 2017-04-04 | A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``django.views.static.serve()`` view could… |
CVE-2017-7233 | Medium | 6.1 | 2017-04-04 | Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The securit… |
CVE-2016-10316 | Medium | 6.1 | 2017-04-03 | Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4)… |
CVE-2016-10315 | Medium | 6.1 | 2017-04-03 | Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4)… |
CVE-2017-2404 | Low | 3.3 | 2017-04-02 | An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to tr… |
CVE-2017-7266 | Medium | 6.1 | 2017-03-26 | Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespecti… |
CVE-2016-7137 | Medium | 6.1 | 2017-03-07 | Multiple open redirect vulnerabilities in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to redirect users to… |
CVE-2017-5615 | Medium | 6.1 | 2017-03-03 | cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location. |
CVE-2017-5614 | Medium | 6.1 | 2017-03-03 | Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors i… |
CVE-2017-5571 | Medium | 6.1 | 2017-03-03 | Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) 11.14.1 and earlier, as used in Citrix License Ser… |
CVE-2017-3840 | Medium | 6.1 | 2017-02-22 | A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to redirect a user to a ma… |
CVE-2016-8376 | Medium | 6.1 | 2017-02-13 | An issue was discovered in Kabona AB WebDatorCentral (WDC) application prior to Version 3.4.0. This non-validated redirect/non-validated forward (OPEN REDIRECT… |
CVE-2017-3810 | Medium | 5.4 | 2017-02-03 | A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a web URL redirect attack against… |
CVE-2016-8961 | Medium | 6.1 | 2017-02-01 | IBM BigFix Inventory v9 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-c… |
CVE-2016-6020 | Medium | 6.1 | 2017-02-01 | IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim t… |
CVE-2016-6908 | Medium | 6.1 | 2017-01-26 | Characters from languages are such as Arabic, Hebrew are displayed from RTL (Right To Left) order in Opera 37.0.2192.105088 for Android, due to mishandling of… |
CVE-2017-3799 | Medium | 5.4 | 2017-01-26 | A vulnerability in a URL parameter of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to perform site redirection. More Information… |
CVE-2017-5474 | Medium | 6.1 | 2017-01-14 | Open redirect vulnerability in comment.php in Serendipity through 2.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing a… |
CVE-2016-5715 | Medium | 6.1 | 2017-01-12 | Open redirect vulnerability in the Console in Puppet Enterprise 2015.x and 2016.x before 2016.4.0 allows remote attackers to redirect users to arbitrary web si… |
CVE-2015-6501 | Medium | 6.1 | 2017-01-12 | Open redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct ph… |
CVE-2016-6657 | High | 7.4 | 2016-12-16 | An open redirect vulnerability has been detected with some Pivotal Cloud Foundry Elastic Runtime components. Users of affected versions should apply the follow… |
CVE-2016-3174 | High | 7.4 | 2016-12-15 | An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The "defer" servlet offers to redirect a client to a specified URL. Since some checks w… |
CVE-2016-3047 | Medium | 6.8 | 2016-12-01 | Open redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote authenticated users to redirect users to arbitrary web sites an… |
CVE-2016-9451 | Medium | 6.8 | 2016-11-25 | Confirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduct open redirect attacks via unspecified vectors. |
CVE-2016-0204 | Medium | 6.8 | 2016-10-16 | Open redirect vulnerability in IBM Cloud Orchestrator 2.4.x before 2.4.0 FP3 allows remote authenticated users to redirect users to arbitrary web sites and con… |
CVE-2016-1000001 | High | 7.4 | 2016-10-07 | flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect |
CVE-2016-6636 | Medium | 5.3 | 2016-09-30 | The OAuth authorization implementation in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH… |
CVE-2016-5977 | Medium | 6.8 | 2016-09-26 | Open redirect vulnerability in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0… |
CVE-2016-3040 | Medium | 6.8 | 2016-09-26 | IBM WebSphere Application Server (WAS) Liberty, as used in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8, allows remo… |
CVE-2016-0928 | High | 7.4 | 2016-09-18 | Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect u… |
CVE-2016-5878 | Medium | 6.8 | 2016-08-08 | Open redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote authenticated users to redirect users to arbitrary web sites and condu… |
CVE-2016-4604 | Medium | 5.4 | 2016-07-22 | Safari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP response specifying redirection to an invalid TCP port number. |
CVE-2016-5385 | High | 8.1 | 2016-07-19 | PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untr… |
CVE-2015-5354 | | 2015-07-01 | Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL… | |
CVE-2015-0697 | | 2015-04-15 | Open redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7.3.0 on Cisco TelePresence Collaboration Desk and Room Endpoin… | |
CVE-2011-1594 | Medium | 6.5 | 2014-02-05 | A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to redirect users to arbitrary we… |
CVE-2012-0518 | Medium | 4.7 | 2012-10-16 | Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect in… |
CVE-2009-3832 | | 2009-10-30 | Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the addre… | |
CVE-2008-1547 | | 2008-10-21 | Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote atta… | |
CVE-2008-2951 | Medium | 6.1 | 2008-07-27 | Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing at… |
CVE-2008-2052 | Medium | 6.1 | 2008-05-02 | Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing at… |
CVE-2005-4206 | Medium | 6.1 | 2005-12-13 | Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to redirect users to… |
CVE-2005-1475 | | 2005-06-16 | The XMLHttpRequest object in Opera 8.0 Final Build 1095 allows remote attackers to bypass access restrictions and perform unauthorized actions on other domains… | |
CVE-2005-0420 | | 2005-04-27 | Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.a… | |
CVE-2004-2260 | | 2004-12-31 | Opera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user clicks a link, which allows remote attackers to redirect to oth… |