What’s Vulnerable › Vulnerabilities

CVE-2018-6324

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-02-16 · updated 2026-06-17
• Weakness: CWE-601

Description

F-Secure Radar (on-premises) before 2018-02-15 has an Unvalidated Redirect via the ReturnUrl parameter that triggers upon a user login.

Affected products

• F-Secure Radar: through 3.9.1

References

• http://oscarhjelm.com/blag/2018/02/f-secure-radar-login-page-unvalidated-redirect-vulnerability/
• http://www.securityfocus.com/bid/103208
• http://oscarhjelm.com/blag/2018/02/f-secure-radar-login-page-unvalidated-redirect-vulnerability/
• http://www.securityfocus.com/bid/103208

Get alerted when CVE-2018-6324 or the next vulnerability affects your stack