CVE-2010-0715
Last modified
CVE-2010-0715 is a vulnerability of currently unknown severity. Open redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the query string.. EPSS estimates a 1.31% chance of exploitation in the next 30 days.
Description
Open redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the query string.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Websphere Portal | 5.1.0.0 |
| Ibm | Websphere Portal | 5.1.0.1 |
| Ibm | Websphere Portal | 5.1.0.2 |
| Ibm | Websphere Portal | 5.1.0.3 |
| Ibm | Websphere Portal | 5.1.0.4 |
| Ibm | Websphere Portal | 5.1.0.5 |
| Ibm | Websphere Portal | 6.0.0.0 |
| Ibm | Websphere Portal | 6.0.0.1 |
| Ibm | Websphere Portal | 6.0.0.2 |
| Ibm | Websphere Portal | 6.0.0.3 |
| Ibm | Websphere Portal | 6.0.0.4 |
| Ibm | Websphere Portal | 6.0.1.0 |
| Ibm | Websphere Portal | 6.0.1.1 |
| Ibm | Websphere Portal | 6.0.1.2 |
| Ibm | Websphere Portal | 6.0.1.3 |
| Ibm | Websphere Portal | 6.0.1.4 |
| Ibm | Websphere Portal | 6.0.1.5 |
| Ibm | Websphere Portal | 6.0.1.6 |
| Ibm | Websphere Portal | 6.0.1.7 |
| Ibm | Websphere Portal | 6.1.0.0 |
| Ibm | Websphere Portal | 6.1.0.1 |
| Ibm | Websphere Portal | 6.1.0.2 |
| Ibm | Websphere Portal | 6.1.0.3 |
| Ibm | Websphere Portal | 6.1.5.0 |
| Ibm | Lotus Web Content Management | 5.1.0.0 |
| Ibm | Lotus Web Content Management | 5.1.0.1 |
| Ibm | Lotus Web Content Management | 5.1.0.2 |
| Ibm | Lotus Web Content Management | 5.1.0.3 |
| Ibm | Lotus Web Content Management | 5.1.0.4 |
| Ibm | Lotus Web Content Management | 5.1.0.5 |
| Ibm | Lotus Web Content Management | 6.0.0.0 |
| Ibm | Lotus Web Content Management | 6.0.0.1 |
| Ibm | Lotus Web Content Management | 6.0.0.2 |
| Ibm | Lotus Web Content Management | 6.0.0.3 |
| Ibm | Lotus Web Content Management | 6.0.0.4 |
| Ibm | Lotus Web Content Management | 6.0.1.0 |
| Ibm | Lotus Web Content Management | 6.0.1.1 |
| Ibm | Lotus Web Content Management | 6.0.1.2 |
| Ibm | Lotus Web Content Management | 6.0.1.3 |
| Ibm | Lotus Web Content Management | 6.0.1.4 |
| Ibm | Lotus Web Content Management | 6.0.1.5 |
| Ibm | Lotus Web Content Management | 6.0.1.6 |
| Ibm | Lotus Web Content Management | 6.0.1.7 |
| Ibm | Lotus Web Content Management | 6.1.0.0 |
| Ibm | Lotus Web Content Management | 6.1.0.1 |
| Ibm | Lotus Web Content Management | 6.1.0.2 |
| Ibm | Lotus Web Content Management | 6.1.0.3 |
| Ibm | Lotus Web Content Management | 6.1.5.0 |
| Ibm | Lotus Workplace Web Content Management | 5.1.0.0 |
| Ibm | Lotus Workplace Web Content Management | 5.1.0.1 |
Showing 50 of 77 affected configurations. See NVD for the full list.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21421469Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21421469Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-0715?
How severe is CVE-2010-0715?
How do I fix CVE-2010-0715?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-0709Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2010-0710SQL injection vulnerability in default.asp in ASPCode CMS 1.…
- CVE-2010-0711Cross-site request forgery (CSRF) vulnerability in default.a…
- CVE-2010-0712Multiple SQL injection vulnerabilities in zport/dmd/Events/g…
- CVE-2010-0713Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2010-0714Cross-site scripting (XSS) vulnerability in login.jsp in IBM…
- CVE-2010-0716_layouts/Upload.aspx in the Documents module in Microsoft Sh…
- CVE-2010-0717The default configuration of cfg.packagepages_actions_exclud…
- CVE-2010-0718Buffer overflow in Microsoft Windows Media Player 9 and 11.0…
- CVE-2010-0719An unspecified API in Microsoft Windows 2000, Windows XP, Wi…
- CVE-2010-0720SQL injection vulnerability in news.php in Erotik Auktionsha…
- CVE-2010-0721SQL injection vulnerability in news.php in Auktionshaus Gelb…
Are you affected by CVE-2010-0715?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST