CVE-2010-2337

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-07-28 · updated 2026-06-16
Weakness: CWE-20

Description

Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors.

Affected products

RSA Federated Identity Manager: 4.0, 4.1

References

http://archives.neohapsis.com/archives/bugtraq/2010-07/0187.html
http://osvdb.org/66504
http://secunia.com/advisories/40704
http://www.securityfocus.com/bid/41850
http://www.securitytracker.com/id?1024239
http://www.vupen.com/english/advisories/2010/1880
https://exchange.xforce.ibmcloud.com/vulnerabilities/60564
https://knowledge.rsasecurity.com/scolcms/set.aspx?id=8692
http://archives.neohapsis.com/archives/bugtraq/2010-07/0187.html
http://osvdb.org/66504
http://secunia.com/advisories/40704
http://www.securityfocus.com/bid/41850

Get alerted when CVE-2010-2337 or the next vulnerability affects your stack