CVE-2017-3889

MEDIO 6.1CVE-2017-3889 · Published 07/04/2017 · updated 17/06/2026

En resumen

CVE-2017-3889 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a registered envelope service (cisco).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.94%, mayor que el 61.1% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
registered envelope service cisco	`= 5.1.0-015`	No fix yet

Description

A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to redirect a user to a undesired web page, aka an Open Redirect. This vulnerability affects the Cisco Registered Envelope cloud-based service. More Information: CSCvc60123. Known Affected Releases: 5.1.0-015.

References

securityfocus.com/bid/97433 · Third Party Advisory
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-res · Vendor Advisory

Más vulnerabilidades de registered envelope service

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free