CVE-2016-0329
First published: Fri Feb 02 2018(Updated: )
Open redirect vulnerability in IBM Emptoris Sourcing 10.0.0.x before 10.0.0.1_iFix3, 10.0.1.x before 10.0.1.3_iFix3, 10.0.2.x before 10.0.2.8_iFix1, 10.0.4.0 before 10.0.4.0_iFix8, and 10.1.0.0 before 10.1.0.0_iFix3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. IBM X-Force ID: 111692.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Emptoris Sourcing | >=10.0.0.0<=10.1.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2016-0329.
What is the title of this vulnerability?
The title of this vulnerability is Open redirect vulnerability in IBM Emptoris Sourcing 10.0.0.x before 10.0.0.1_iFix3, 10.0.1.x before 10.0.1.3_iFix3, 10.0.2.x before 10.0.2.8_iFix1, 10.0.4.0 before 10.0.4.0_iFix8, and 10.1.0.0 before 10.1.0.0_iFix3.
What is the severity of CVE-2016-0329 vulnerability?
The severity of CVE-2016-0329 vulnerability is medium with a severity value of 5.4.
What is the affected software for this vulnerability?
The affected software for this vulnerability is IBM Emptoris Sourcing versions 10.0.0.x through 10.1.0.0.
How can this vulnerability be exploited?
This vulnerability can be exploited by remote attackers to redirect users to arbitrary web sites and conduct phishing attacks.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm emptoris sourcing
- version/ibm emptoris sourcing/10.0.0.0
- version/ibm emptoris sourcing/10.1.0.0