CVE-2016-4604

EPSS 0.37%
Published 22.07.2016 02:59:28
Last modified 12.04.2025 10:46:40
Source product-security@apple.com
Teams watchlist Login
Open Login

Safari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP response specifying redirection to an invalid TCP port number.

Affected products Warnungen 0 Metrics 3 CWE 1 References 7

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Safari

Apple ≫ iPhone OS Version <= 9.3.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.37%	0.577

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.4	2.8	2.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html

Mailing List

https://support.apple.com/HT206902

Vendor Advisory

http://www.securitytracker.com/id/1036344

http://www.securityfocus.com/bid/91825

https://nvd.nist.gov/vuln/detail/CVE-2016-4604

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-4604

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-4604

EUVD