CVE-2010-3320

CWE-20 — Improper Input Validation3 documents3 sources
Severity
6.8MEDIUM
EPSS
0.5%
top 32.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Filenet Content Manager
Timeline
PublishedSep 13
Latest updateMay 17

Description

Open redirect vulnerability in IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDibm/filenet_content_manager4.5.0, 4.5.1+1

🔴Vulnerability Details

2
GHSA
GHSA-vr2p-wc7c-p7pg: Open redirect vulnerability in IBM Records Manager (RM) 4↗2022-05-17
▶
CVEList
CVE-2010-3320: Open redirect vulnerability in IBM Records Manager (RM) 4↗2010-09-13
▶
CVE-2010-3320 (MEDIUM CVSS 6.8) | Open redirect vulnerability in IBM | cvebase.io