Vulnerabilities > URL Redirection to Untrusted Site ('Open Redirect')

DATE CVE VULNERABILITY TITLE RISK
2021-05-11 CVE-2021-27612 Open Redirect vulnerability in SAP GUI for Windows 7.60/7.70
In specific situations SAP GUI for Windows until and including 7.60 PL9, 7.70 PL0, forwards a user to specific malicious website which could contain malware or might lead to phishing attacks to steal credentials of the victim.
network
low complexity
sap CWE-601
6.1
2021-05-06 CVE-2021-1397 Open Redirect vulnerability in Cisco products
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.
network
low complexity
cisco CWE-601
6.1
2021-05-05 CVE-2020-13662 Open Redirect vulnerability in Drupal
Open Redirect vulnerability in Drupal Core allows a user to be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL.
network
low complexity
drupal CWE-601
6.1
2021-05-03 CVE-2020-23015 Open Redirect vulnerability in Opnsense
An open redirect issue was discovered in OPNsense through 20.1.5.
network
low complexity
opnsense CWE-601
6.1
2021-04-29 CVE-2021-29137 Open Redirect vulnerability in Arubanetworks Airwave
A remote URL redirection vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1.
network
low complexity
arubanetworks CWE-601
6.1
2021-04-29 CVE-2021-31879 Open Redirect vulnerability in multiple products
GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.
network
low complexity
gnu broadcom netapp CWE-601
6.1
2021-04-27 CVE-2020-21998 Open Redirect vulnerability in Homeautomation Project Homeautomation 3.3.2
In HomeAutomation 3.3.2 input passed via the 'redirect' GET parameter in 'api.php' script is not properly verified before being used to redirect users.
network
low complexity
homeautomation-project CWE-601
6.1
2021-04-27 CVE-2021-28125 Open Redirect vulnerability in Apache Superset
Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious.
network
low complexity
apache CWE-601
6.1
2021-04-21 CVE-2021-29456 Open Redirect vulnerability in Authelia
Authelia is an open-source authentication and authorization server providing 2-factor authentication and single sign-on (SSO) for your applications via a web portal.
network
low complexity
authelia CWE-601
5.4
2021-04-12 CVE-2021-21392 Open Redirect vulnerability in multiple products
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).
network
low complexity
matrix fedoraproject CWE-601
6.3