Vulnerabilities > URL Redirection to Untrusted Site ('Open Redirect')

DATE CVE VULNERABILITY TITLE RISK
2017-04-24 CVE-2017-3528 Open Redirect vulnerability in Oracle Applications Framework
Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datepicker, etc.)).
network
oracle CWE-601
5.8
2017-04-21 CVE-2016-4075 Open Redirect vulnerability in Opera Browser and Opera Mini
Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, related to the about:blank URL.
network
opera CWE-601
5.8
2017-04-20 CVE-2016-1213 Open Redirect vulnerability in Cybozu Garoon
The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites.
network
cybozu CWE-601
5.8
2017-04-17 CVE-2016-0228 Open Redirect vulnerability in IBM Marketing Platform 10.0
IBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in various scripts.
network
ibm CWE-601
4.9
2017-04-10 CVE-2016-4334 Open Redirect vulnerability in Jivesoftware Jive
Jive before 2016.3.1 has an open redirect from the external-link.jspa page.
5.8
2017-04-07 CVE-2017-6604 Open Redirect vulnerability in Cisco Unified Computing System 2.2(8B)/3.0(1C)/3.1(2C)B
A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.
network
cisco CWE-601
5.8
2017-04-04 CVE-2017-7234 Open Redirect vulnerability in Djangoproject Django
A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``django.views.static.serve()`` view could redirect to any other domain, aka an open redirect vulnerability.
5.8
2017-04-04 CVE-2017-7233 Open Redirect vulnerability in Djangoproject Django
Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL.
5.8
2017-04-03 CVE-2016-10316 Open Redirect vulnerability in Jensenofscandinavia Al3G Firmware, Al5000Ac Firmware and Al59300 Firmware
Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev.
5.8
2017-04-03 CVE-2016-10315 Open Redirect vulnerability in Jensenofscandinavia Al3G Firmware, Al5000Ac Firmware and Al59300 Firmware
Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev.
5.8