CVE Vulnerabilities

CVE-2014-4760

Published: Aug 12, 2014 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Open redirect vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, 8.0.0 before 8.0.0.1 CF13, and 8.5.0 before CF01 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.

Affected Software

Name Vendor Start Version End Version
Websphere_portal Ibm 6.1.0.0 (including) 6.1.0.0 (including)
Websphere_portal Ibm 6.1.0.1 (including) 6.1.0.1 (including)
Websphere_portal Ibm 6.1.0.2 (including) 6.1.0.2 (including)
Websphere_portal Ibm 6.1.0.3 (including) 6.1.0.3 (including)
Websphere_portal Ibm 6.1.0.4 (including) 6.1.0.4 (including)
Websphere_portal Ibm 6.1.0.5 (including) 6.1.0.5 (including)
Websphere_portal Ibm 6.1.0.6 (including) 6.1.0.6 (including)
Websphere_portal Ibm 6.1.5.0 (including) 6.1.5.0 (including)
Websphere_portal Ibm 6.1.5.1 (including) 6.1.5.1 (including)
Websphere_portal Ibm 6.1.5.2 (including) 6.1.5.2 (including)
Websphere_portal Ibm 6.1.5.3 (including) 6.1.5.3 (including)
Websphere_portal Ibm 7.0.0.0 (including) 7.0.0.0 (including)
Websphere_portal Ibm 7.0.0.1 (including) 7.0.0.1 (including)
Websphere_portal Ibm 7.0.0.2 (including) 7.0.0.2 (including)
Websphere_portal Ibm 8.0.0.0 (including) 8.0.0.0 (including)
Websphere_portal Ibm 8.5.0.0 (including) 8.5.0.0 (including)

References