6.4

CVE-2014-6255

Open redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the came_from parameter, aka ZEN-11998.

Data is provided by the National Vulnerability Database (NVD)
Zenoss ≫ Zenoss Core Version <= 4.2.5
Zenoss ≫ Zenoss Core Version2.4.0
Zenoss ≫ Zenoss Core Version2.4.5
Zenoss ≫ Zenoss Core Version2.5.0
Zenoss ≫ Zenoss Core Version2.5.1
Zenoss ≫ Zenoss Core Version2.5.2
Zenoss ≫ Zenoss Core Version3.0.0
Zenoss ≫ Zenoss Core Version3.0.1
Zenoss ≫ Zenoss Core Version3.0.2
Zenoss ≫ Zenoss Core Version3.0.3
Zenoss ≫ Zenoss Core Version3.1.0
Zenoss ≫ Zenoss Core Version3.2.0
Zenoss ≫ Zenoss Core Version3.2.1
Zenoss ≫ Zenoss Core Version4.2.0
Zenoss ≫ Zenoss Core Version4.2.3
Zenoss ≫ Zenoss Core Version4.2.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.53% 0.662
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
http://www.kb.cert.org/vuls/id/449452
Third Party Advisory
US Government Resource