VulnerabilityModified
CVE-2014-3054
Multiple open redirect vulnerabilities in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
MEDIUM 5.8EPSS 1.82%
Does this matter?
Lower severity and a low EPSS score (1.82%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple open redirect vulnerabilities in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
- CVSS 2.0
- 5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
- EPSS
- 1.82% probability · 78th percentile
- CISA KEV
- Not listed
- Affected
- ibm/websphere portal · ibm/websphere portal unified task list portlet
- Source
- psirt@us.ibm.com
References
- http://secunia.com/advisories/60499
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909
- http://www-01.ibm.com/support/docview.wss?uid=swg21677032Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93528
- http://secunia.com/advisories/60499
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909
- http://www-01.ibm.com/support/docview.wss?uid=swg21677032Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93528
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.