CVE-2015-4668

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-09-25 · updated 2026-06-17
Weakness: CWE-601

Description

Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirurl parameter.

Affected products

Xceedium Xsuite: 2.3.0, 2.4.3.0

References

http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt
http://www.securityfocus.com/archive/1/536058/100/0/threaded
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html
https://www.exploit-db.com/exploits/37708/
http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt
http://www.securityfocus.com/archive/1/536058/100/0/threaded
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html
https://www.exploit-db.com/exploits/37708/

Get alerted when CVE-2015-4668 or the next vulnerability affects your stack