Open Redirect Vulnerabilities in Cisco Emergency Responder Software

CVE-2014-2117

Summary

Multiple vulnerabilities related to open redirects exist in Cisco Emergency Responder 8.6 and prior versions. These vulnerabilities allow remote attackers to redirect users to arbitrary websites, thereby potentially facilitating phishing attacks through the exploitation of unspecified parameters. Due to these vulnerabilities, users could unknowingly disclose sensitive information to malicious parties, making it essential for organizations using the affected Cisco products to apply mitigations and maintain heightened security awareness.

References