CVE-2015-3898

Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arbitrary web sites and conduct phishing…

published February 28, 2018

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the redirectUrl parameter to (1) bonita/login.jsp or (2) bonita/loginservice.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05837 · 93.1th percentile
Published
2018-02-28T21:00Z
EPSS history
Timeline
  • 28 FEB 21:00Z
    Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arbitrary web sites and conduct phishing…
    cvelistv5