5.8
CVSSv2

CVE-2019-4595

Published: 24/02/2020 Updated: 24/02/2020
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Vulnerability Summary

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 up to and including 5.2.6.5 could allow a remote malicious user to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the malicious user to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 167878.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm sterling b2b integrator