CVE-2015-3898

Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the redirectUrl parameter to (1) bonita/login.jsp or (2) bonita/loginservice.

• CWE-601

• http://packetstormsecurity.com/files/132237/Bonita-BPM-6.5.1-Directory-Traversal-Open-Redirect.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/535733/100/0/threadedExploit, Third Party Advisory, VDB Entry
• https://www.htbridge.com/advisory/HTB23259Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/132237/Bonita-BPM-6.5.1-Directory-Traversal-Open-Redirect.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/535733/100/0/threadedExploit, Third Party Advisory, VDB Entry
• https://www.htbridge.com/advisory/HTB23259Exploit, Third Party Advisory

Published

Feb 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3885Integer overflow in the ljpeg_start function in dcraw 7.00 a…
• CVE-2015-3886libinfinity before 0.6.6-1 does not validate expired SSL cer…
• CVE-2015-3887Untrusted search path vulnerability in ProxyChains-NG before…
• CVE-2015-3888Jolla Sailfish OS before 1.1.2.16 allows remote attackers to…
• CVE-2015-3890Use-after-free vulnerability in Open Litespeed before 1.3.10…7.5
• CVE-2015-3897Directory traversal vulnerability in Bonita BPM Portal befor…
• CVE-2015-3900RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x …
• CVE-2015-3902Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2015-3903libraries/Config.class.php in phpMyAdmin 4.0.x before 4.0.10…
• CVE-2015-3904Multiple cross-site scripting (XSS) vulnerabilities in roomc…
• CVE-2015-3905Buffer overflow in the set_cs_start function in t1disasm.c i…
• CVE-2015-3906The logcat_dump_text function in wiretap/logcat.c in the And…