CVE Vulnerabilities

CVE-2015-7428

Published: Feb 29, 2016 | Modified: Apr 12, 2025
CVSS 3.x
7.4
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
CVSS 2.x
5.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Open redirect vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.

Affected Software

NameVendorStart VersionEnd Version
Websphere_portalIbm8.0.0.0 (including)8.0.0.0 (including)
Websphere_portalIbm8.0.0.1 (including)8.0.0.1 (including)
Websphere_portalIbm8.5.0.0 (including)8.5.0.0 (including)

References