CWE-601
Low likelihoodURL Redirection to Untrusted Site ('Open Redirect')
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
1,532 vulnerabilities with CWE-601
CVE-2017-1159
MEDIUM
IBM Business Process Manager <8.5 - Open Redirect
CVSS 5.4
CVE-2017-2497
MEDIUM
Apple Iphone OS < 10.3.1 - Open Redirect
CVSS 6.1
CVE-2017-9062
HIGH
WordPress < 4.7.5 - Cross-Site Request Forgery via XML-RPC API
CVSS 8.6
CVE-2017-1156
HIGH
IBM WebSphere Portal <9.0 - Open Redirect
CVSS 8.8
CVE-2017-3528
MEDIUM
Oracle E-Business Suite 12.1.3-12.2.6 - RCE
CVSS 5.4
CVE-2017-6604
MEDIUM
Cisco Unified Computing System - Unauthenticated Open Redirect via Web Interface
CVSS 6.1
CVE-2017-3889
MEDIUM
Cisco Registered Envelope Service - Open Redirect
CVSS 6.1
CVE-2017-7234
MEDIUM
Django <1.10.7, <1.9.13, <1.8.18 - Open Redirect
CVSS 6.1
CVE-2017-7233
MEDIUM
Django <1.10.7-1.9.13-1.8.18 - Open Redirect
CVSS 6.1
CVE-2017-2404
LOW
iPhone OS < 10.3 - Unauthenticated Arbitrary Telephone Call via Quick Look PDF tel: URL
CVSS 3.3
CVE-2017-7266
MEDIUM
Netflix Security Monkey <0.8.0 - Open Redirect
CVSS 6.1
CVE-2017-5615
MEDIUM
cPanel cgiemail and cgiecho - HTTP Header Injection via Newline in Redirect Location
CVSS 6.1
CVE-2017-5614
MEDIUM
cPanel 11.54.0.0-11.54.0.35 - Open Redirect via cgiemail/cgiecho Success/Failure Parameter
CVSS 6.1
CVE-2017-5571
MEDIUM
FlexNet Publisher < 11.14.1 - Open Redirect via lmadmin Component
CVSS 6.1
CVE-2017-3840
MEDIUM
Cisco ACS <5.8(2.5) - Open Redirect
CVSS 6.1
CVE-2017-3810
MEDIUM
Cisco Prime Service Catalog <10.0_R2_tanggula - Open Redirect
CVSS 5.4
CVE-2017-3799
MEDIUM
Cisco WebEx Meeting Center - Open Redirect
CVSS 5.4
CVE-2017-5474
MEDIUM
Serendipity < 2.0.5 - Open Redirect via HTTP Referer Header
CVSS 6.1
CVE-2016-15030
LOW
Arno0x TwoFactorAuth - Open Redirect
CVSS 3.5
CVE-2016-1000107
MEDIUM
Erlang/OTP < 22.1 - HTTP Proxy Header Injection via HTTP_PROXY Environment Variable
CVSS 6.1
CVE-2016-1000108
MEDIUM
yaws < 2.0.4 - Open Redirect via HTTP_PROXY Environment Variable
CVSS 6.1
CVE-2016-1000110
MEDIUM
Python < 2.7.13 - Open Redirect via HTTP_PROXY Variable
CVSS 6.1
CVE-2016-6154
MEDIUM
Watchguard Fireware < 11.11 - Reflected Cross-Site Scripting and Open Redirect
CVSS 6.1
CVE-2016-10769
MEDIUM
cPanel 11.54.0.0-11.54.0.33 - Open Redirect via FormMail-clone.cgi
CVSS 6.1
CVE-2016-10742
MEDIUM
Zabbix < 2.2.21rc1, 3.x < 3.0.13rc1, 3.1.x-3.2.x < 3.2.10rc1, 3.3.x-3.4.x < 3.4.4rc1 Open Redirect
CVSS 6.1
Details
Vulnerabilities
1,532
Exploit Likelihood
Low