Vulnerabilities > URL Redirection to Untrusted Site ('Open Redirect')

DATE CVE VULNERABILITY TITLE RISK
2019-06-07 CVE-2019-3477 Open Redirect vulnerability in Microfocus Solutions Business Manager
Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect.
network
low complexity
microfocus CWE-601
6.1
2019-06-06 CVE-2019-4201 Open Redirect vulnerability in IBM Jazz for Service Management
IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.
network
low complexity
ibm CWE-601
6.1
2019-06-04 CVE-2018-13384 Open Redirect vulnerability in Fortinet Fortios
A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a remote attacker to potentially poison HTTP cache and subsequently redirect SSL VPN web portal users to arbitrary web domains.
network
low complexity
fortinet CWE-601
6.1
2019-06-03 CVE-2019-6741 Open Redirect vulnerability in Samsung Galaxy S9 Firmware 1.4.20.2
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to January 2019 Security Update (SMR-JAN-2019 - SVE-2018-13467).
network
low complexity
samsung CWE-601
critical
9.3
2019-05-22 CVE-2017-5871 Open Redirect vulnerability in Odoo 10.0/8.0/9.0
Odoo Version <= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection.
network
low complexity
odoo CWE-601
5.4
2019-05-17 CVE-2019-6781 Open Redirect vulnerability in Gitlab
An Improper Input Validation issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1.
network
low complexity
gitlab CWE-601
7.5
2019-05-17 CVE-2019-5946 Open Redirect vulnerability in Cybozu Garoon
Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the Login Screen.
network
low complexity
cybozu CWE-601
6.1
2019-05-16 CVE-2019-10117 Open Redirect vulnerability in Gitlab
An Open Redirect issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2.
network
low complexity
gitlab CWE-601
6.1
2019-05-13 CVE-2019-8951 Open Redirect vulnerability in Bosch products
An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products.
network
low complexity
bosch CWE-601
6.1
2019-05-13 CVE-2018-12300 Open Redirect vulnerability in Seagate NAS OS 4.3.15.1
Arbitrary Redirect in echo-server.html in Seagate NAS OS version 4.3.15.1 allows attackers to disclose information in the Referer header via the 'state' URL parameter.
network
low complexity
seagate CWE-601
6.1