Description
Open redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/92279
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21987721
Scores
CVSS v3
6.8
EPSS
0.0080
EPSS Percentile
51.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
Details
CWE
CWE-601
Status
published
Products (14)
ibm/filenet_workplace
4.0.2.0
ibm/filenet_workplace
4.0.2.1
ibm/filenet_workplace
4.0.2.2
ibm/filenet_workplace
4.0.2.3
ibm/filenet_workplace
4.0.2.4
ibm/filenet_workplace
4.0.2.5
ibm/filenet_workplace
4.0.2.6
ibm/filenet_workplace
4.0.2.7
ibm/filenet_workplace
4.0.2.8
ibm/filenet_workplace
4.0.2.9
... and 4 more
Published
Aug 08, 2016
Tracked Since
Feb 18, 2026