CVE-2015-1921

Published: May 25, 2015Modified: May 6, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Open redirect vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF17 and 8.5.0 before CF06 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.

Affected (3)

Products: Ibm: Websphere Portal

Ibm

1 product

Websphere Portal

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Portal	Version 8.0.0.0
Ibm Websphere Portal	Version 8.0.0.1
Ibm Websphere Portal	Version 8.5.0.0

References (6)

http://www-01.ibm.com/support/docview.wss?uid=swg1PI38632

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21884060

Source: psirt@us.ibm.com

Vendor Advisory

http://www.securityfocus.com/bid/74705

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

http://www-01.ibm.com/support/docview.wss?uid=swg1PI38632

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-01.ibm.com/support/docview.wss?uid=swg21884060

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/74705

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.