CVE-2016-0228
Last modified
CVE-2016-0228 is a vulnerability of currently unknown severity. IBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in various scripts. An attacker could exploit this vulnerability to redirect a victim to arbitrary Web sites. EPSS estimates a 0.65% chance of exploitation in the next 30 days.
Description
IBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in various scripts. An attacker could exploit this vulnerability to redirect a victim to arbitrary Web sites. IBM X-Force ID: 110236.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Marketing Platform | 10.0 |
References
- http://www.ibm.com/support/docview.wss?uid=swg22001952Patch, Vendor Advisory
- http://www.securityfocus.com/bid/97670Third Party Advisory, VDB Entry
- http://www.ibm.com/support/docview.wss?uid=swg22001952Patch, Vendor Advisory
- http://www.securityfocus.com/bid/97670Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-0228?
How severe is CVE-2016-0228?
How do I fix CVE-2016-0228?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-0222IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allow…
- CVE-2016-0223Cross-site scripting (XSS) vulnerability in the Webform Fram…
- CVE-2016-0224SQL injection vulnerability in IBM Marketing Platform 8.5.x,…
- CVE-2016-0225IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through …
- CVE-2016-0226The client implementation in IBM Informix Dynamic Server 11.…
- CVE-2016-0227Cross-site scripting (XSS) vulnerability in the document-lis…
- CVE-2016-0229Cross-site scripting (XSS) vulnerability in IBM Marketing Pl…
- CVE-2016-0230IBM Power Hardware Management Console (HMC) 7.3 through 7.3.…6.8
- CVE-2016-0231IBM Financial Transaction Manager (FTM) for ACH Services, Ch…
- CVE-2016-0232IBM Financial Transaction Manager (FTM) for ACH Services, Ch…
- CVE-2016-0233SQL injection vulnerability in IBM Marketing Platform 8.5.x,…
- CVE-2016-0234IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow a l…4
Are you affected by CVE-2016-0228?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
