CVE-2014-2117

CVE-2014-2117 affects Cisco Emergency Responder (ER) 8.6 and earlier. The issue arises from insufficient input validation in the ER web interface, enabling open redirects to arbitrary sites via crafted parameters. This could allow remote, unauthenticated attackers to funnel users to phishing page...