Multiple Open Redirect Vulnerabilities in IBM WebSphere Portal Products
CVE-2014-3054

Currently unrated

Key Information:

Vendor

IBM
Status
Websphere Portal
Websphere Portal Unified Task List Portlet
Vendor
CVE Published:
29 July 2014

What is CVE-2014-3054?

Multiple open redirect vulnerabilities in the Unified Task List (UTL) Portlet of IBM WebSphere Portal versions 7.x and 8.x allow attackers to exploit the system. By redirecting users to arbitrary websites, attackers can effectively conduct phishing attacks and other malicious activities through unspecified methods. It is crucial for users and administrators to apply the necessary patches and updates to safeguard against these security risks.

References

http://secunia.com/advisories/60499
third-party-advisoryx_refsource_SECUNIA
http://www-01.ibm.com/support/docview.wss?uid=swg21677032
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/93528
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2014-3054 : Multiple Open Redirect Vulnerabilities in IBM WebSphere Portal Products