CVE-2014-4760

Published: Aug 12, 2014Modified: May 6, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Open redirect vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, 8.0.0 before 8.0.0.1 CF13, and 8.5.0 before CF01 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.

Affected (16)

Products: Ibm: Websphere Portal

Ibm

1 product

Websphere Portal

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Portal	Version 6.1.0.0
Ibm Websphere Portal	Version 6.1.0.1
Ibm Websphere Portal	Version 6.1.0.2
Ibm Websphere Portal	Version 6.1.0.3
Ibm Websphere Portal	Version 6.1.0.4
Ibm Websphere Portal	Version 6.1.0.5
Ibm Websphere Portal	Version 6.1.0.6
Ibm Websphere Portal	Version 6.1.5.0
Ibm Websphere Portal	Version 6.1.5.1
Ibm Websphere Portal	Version 6.1.5.2
Ibm Websphere Portal	Version 6.1.5.3
Ibm Websphere Portal	Version 7.0.0.0
Ibm Websphere Portal	Version 7.0.0.1
Ibm Websphere Portal	Version 7.0.0.2
Ibm Websphere Portal	Version 8.0.0.0
Ibm Websphere Portal	Version 8.5.0.0