VulnerabilityModified

CVE-2016-5878

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

MEDIUM 6.8EPSS 0.80%

Does this matter?

Lower severity and a low EPSS score (0.80%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 3.0: 6.8 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
EPSS: 0.80% probability · 55th percentile
CISA KEV: Not listed
Weakness: CWE-601
Affected: ibm/filenet workplace
Source: psirt@us.ibm.com

References

http://www-01.ibm.com/support/docview.wss?uid=swg21987721Patch, Vendor Advisory
http://www.securityfocus.com/bid/92279
http://www-01.ibm.com/support/docview.wss?uid=swg21987721Patch, Vendor Advisory
http://www.securityfocus.com/bid/92279

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.