Lucene search

K
nvd[email protected]NVD:CVE-2013-4723
HistoryApr 25, 2014 - 5:12 p.m.

CVE-2013-4723

2014-04-2517:12:03
CWE-20
web.nvd.nist.gov

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.1%

Open redirect vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the l parameter to track.aspx.

Affected configurations

NVD
Node
ddsncm3_acora_content_management_systemMatch5.5.0\/1b-p1
OR
ddsncm3_acora_content_management_systemMatch5.5.7\/12b
OR
ddsncm3_acora_content_management_systemMatch6.0.2\/1a
OR
ddsncm3_acora_content_management_systemMatch6.0.6\/1a

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.1%

Related for NVD:CVE-2013-4723