CVE-2009-0347 : Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine allows remote attackers

Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter.

Published 2009-01-29 19:30:00

Updated 2017-08-08 01:33:54

Source MITRE

View at NVD, CVE.org

Vulnerability category: Open redirect

Exploit prediction scoring system (EPSS) score for CVE-2009-0347

EPSS FAQ

10.61%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 95 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2009-0347

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.8	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:P	8.6	4.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2009-0347

CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Assigned by: nvd@nist.gov (Primary)

Products affected by CVE-2009-0347

Autonomy » Ultraseek » Version: Nil
cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2009-0347

Exploit prediction scoring system (EPSS) score for CVE-2009-0347

CVSS scores for CVE-2009-0347

CWE ids for CVE-2009-0347

References for CVE-2009-0347

Products affected by CVE-2009-0347