Description
URL redirection to untrusted site ('open redirect') vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 before 5.542.0.
References (1)
Core 1
Core References
Government Resource government-resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0593
Scores
CVSS v3
6.1
EPSS
0.0014
EPSS Percentile
3.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-601
Status
published
Products (2)
Universal Software Inc./FlexCity
5.536.0 - 11052026
Universal Software Inc./FlexCity
5.536.0 - 5.542.0
Published
Jul 21, 2026
Tracked Since
Jul 21, 2026