CVE-2020-10775

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-08-24 · updated 2026-06-17
Weakness: CWE-451

Description

An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical part of the URL is no longer visible. The highest threat from this vulnerability is on confidentiality.

Affected products

Oracle Virtualization: 4.0
oVirt: through 4.4

References

https://bugzilla.redhat.com/show_bug.cgi?id=1847420
https://bugzilla.redhat.com/show_bug.cgi?id=1847420

Get alerted when CVE-2020-10775 or the next vulnerability affects your stack