CVE-2014-9617

MEDIUM NUCLEI

Netsweeper <4.0.5 - Open Redirect

Title source: llm

Description

Open redirect vulnerability in remotereporter/load_logfiles.php in Netsweeper before 4.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.

Nuclei Templates (1)

Netsweeper 3.0.6 - Open Redirection

MEDIUMby daffainfo

References (1)

[Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html

Scores

CVSS v3 6.1

EPSS 0.2619

EPSS Percentile 96.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-601

Status published

Products (1)

netsweeper/netsweeper < 4.0.5

Published Feb 19, 2020

Tracked Since Feb 18, 2026