CVE-2015-4668

MEDIUM NUCLEI

Xceedium Xsuite - Open Redirect

Title source: rule

Description

Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirurl parameter.

Exploits (1)

exploitdb WRITEUP

by modzero · textwebappsphp

https://www.exploit-db.com/exploits/37708

View Code ZIP pw:eip

Nuclei Templates (1)

Xsuite <=2.4.4.5 - Open Redirect

MEDIUMby 0x_Akoko

References (4)

[Exploit, Third Party Advisory] http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt

[Various Sources] https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html

[Exploit, Third Party Advisory, VDB Entry] https://www.exploit-db.com/exploits/37708/

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/536058/100/0/threaded

Scores

CVSS v3 6.1

EPSS 0.0420

EPSS Percentile 88.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-601

Status published

Products (2)

xceedium/xsuite 2.3.0

xceedium/xsuite 2.4.3.0

Published Sep 25, 2017

Tracked Since Feb 18, 2026