CVE-2014-0925

LOW 3.5CVE-2014-0925 · Published 30/05/2014 · updated 17/06/2026

In short

CVE-2014-0925 is a LOW (CVSS 3.5) vulnerability affecting sterling control center (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sterling control center ibm	`= 5.4.0= 5.4.0.1= 5.4.1.0`	No fix yet

Description

Open redirect vulnerability in IBM Sterling Control Center 5.4.0 before 5.4.0.1 iFix 3 and 5.4.1 before 5.4.1.0 iFix 2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.

References

www-01.ibm.com/support/docview.wss · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/92078

More vulnerabilities in sterling control center

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free