CVE-2018-1736

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack

High · published September 27, 2018

CVSS v3.0
7.4
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 147906.

The record
Technical detail
CVSS v3.0
7.4 · HIGH
Vector
CVSS:3.0/A:N/AC:L/AV:N/C:N/I:H/PR:N/S:C/UI:R/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.01507 · 74.2th percentile
Published
2018-09-27T19:00Z
EPSS history
Timeline
  • 27 SEP 19:00Z
    IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
    cvelistv5