5.8

CVE-2010-3473

Open redirect vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 001
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 002
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 003
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 004
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 005
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 006
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 007
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 008
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 009
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 010
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 011
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 012
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 013
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 014
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 015
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 016
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 017
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 018
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 019
Ibm ≫ Filenet P8 Application Engine Version 3.5.1 Update 020
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.08% 0.615
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm
http://secunia.com/advisories/41458
Vendor Advisory
http://www.securityfocus.com/bid/43272
http://www.vupen.com/english/advisories/2010/2419
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37180