VulnerabilityModified

CVE-2015-0512

Open redirect vulnerability in EMC Unisphere Central before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter.

MEDIUM 5.8EPSS 1.80%

Does this matter?

Lower severity and a low EPSS score (1.80%). Track it; it rarely justifies an emergency change on its own.

Description

Open redirect vulnerability in EMC Unisphere Central before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter.

CVSS 2.0: 5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
EPSS: 1.80% probability · 77th percentile
CISA KEV: Not listed
Affected: emc/unisphere central
Source: security_alert@emc.com

References

http://archives.neohapsis.com/archives/bugtraq/2015-01/0147.html
http://www.securityfocus.com/bid/72374
http://www.securitytracker.com/id/1031684
http://archives.neohapsis.com/archives/bugtraq/2015-01/0147.html
http://www.securityfocus.com/bid/72374
http://www.securitytracker.com/id/1031684

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.