CVE-2017-3889

A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to redirect a user to a undesired web page, aka an Open Redirect. This vulnerability affects the Cisco Registered Envelope cloud-based service. More Information: CSCvc60123. Known Affected Releases: 5.1.0-015.

• CWE-20
• CWE-601

• http://www.securityfocus.com/bid/97433Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-resVendor Advisory
• http://www.securityfocus.com/bid/97433Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-resVendor Advisory

Published

Apr 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3883A vulnerability in the authentication, authorization, and ac…
• CVE-2017-3884A vulnerability in the web interface of Cisco Prime Infrastr…
• CVE-2017-3885A vulnerability in the detection engine reassembly of Secure…
• CVE-2017-3886A vulnerability in the Cisco Unified Communications Manager …
• CVE-2017-3887A vulnerability in the detection engine that handles Secure …5.9
• CVE-2017-3888A vulnerability in the web-based management interface of Cis…
• CVE-2017-3890A reflected cross-site scripting vulnerability in the BlackB…6.1
• CVE-2017-3891In BlackBerry QNX Software Development Platform (SDP) 6.6.0,…9.6
• CVE-2017-3892In BlackBerry QNX Software Development Platform (SDP) 6.6.0,…3.8
• CVE-2017-3893In BlackBerry QNX Software Development Platform (SDP) 6.6.0,…1.9
• CVE-2017-3894A stored cross site scripting vulnerability in the Managemen…
• CVE-2017-3895Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…