CVE-2017-1450

IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 128177.

• CWE-601

• http://www-01.ibm.com/support/docview.wss?uid=swg22005834Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/128177VDB Entry, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg22005834Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/128177VDB Entry, Vendor Advisory

Published

Aug 31, 2017

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14493Stack-based buffer overflow in dnsmasq before 2.78 allows re…
• CVE-2017-14494dnsmasq before 2.78, when configured as a relay, allows remo…
• CVE-2017-14495Memory leak in dnsmasq before 2.78, when the --add-mac, --ad…
• CVE-2017-14496Integer underflow in the add_pseudoheader function in dnsmas…
• CVE-2017-14497The tpacket_rcv function in net/packet/af_packet.c in the Li…7.8
• CVE-2017-14498SilverStripe CMS before 3.6.1 has XSS via an SVG document th…
• CVE-2017-14500Improper Neutralization of Special Elements used in an OS Co…
• CVE-2017-14501An out-of-bounds read flaw exists in parse_file_info in arch…
• CVE-2017-14502read_header in archive_read_support_format_rar.c in libarchi…
• CVE-2017-14503libarchive 3.3.2 suffers from an out-of-bounds read within l…
• CVE-2017-14504ReadPNMImage in coders/pnm.c in GraphicsMagick 1.3.26 does n…
• CVE-2017-14505DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick…