≤ 2016.3
Jive before 2016.3.1 has an open redirect from the external-link.jspa page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.