6.8
CVSSv2

CVE-2017-1156

Published: 05/05/2017 Updated: 03/10/2019
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

IBM WebSphere Portal 8.5 and 9.0 could allow a remote malicious user to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the malicious user to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force. ID: 122592

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm websphere portal 9.0

ibm websphere portal 8.5