CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–2 of 2 advisories (Page 1/1)

CVE-2021-380006.1/MEDIUMEPSS 5.0%CISA KEV

2021-11-23

Google Chrome on Android Intent Insufficient Validation Open Redirect Vulnerability (CVE-2021-38000, CISA KEV)

[Affected Scope] Google Chrome on Android prior to version 95.0.4638.69

[Impact] Remote attackers can force the browser to navigate to arbitrary malicious URLs via crafted HTML pages, leading to credential phishing or drive-by downloads

[Mitigation] Immediately update Google Chrome on Android to the latest version (95.0.4638.69 or higher) via the Google Play Store

cve-2021-38000 android-intent open-redirect cwe-601 cwe-20

Full Advisory & Mitigation

CVE-2012-05184.7/MEDIUMEPSS 4.7%CISA KEV

2012-10-16

Oracle Fusion Middleware SSO Open Redirect Vulnerability (CVE-2012-0518) Analysis & Mitigation Guide

[Affected Scope] Oracle Application Server Single Sign-On (OSSO) component in Oracle Fusion Middleware 10.1.4.3.0

[Impact] Remote attackers can compromise integrity by redirecting authenticated users to untrusted external malicious websites, facilitating phishing and credential harvesting

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or configure URL redirection filtering on the Oracle HTTP Server (OHS)

cve-2012-0518 cwe-601 open-redirect sso fusion-middleware

Full Advisory & Mitigation