Unscored severity · published Jun 20, 2012
CVE-2012-2159
Open redirect vulnerability in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Open redirect vulnerability in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Security Appscan Source · Ibm
7.0; 8.0; 8.0.0.1; 8.0.0.2; 8.5; 8.5.0.1 · source: NVD
SD
Spss Data Collection · Ibm
6.0; 6.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2159
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2159
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21596690
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21598423
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/74832
More from Security Appscan Source
9.8
CVE-2014-6120
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1…
5.3
CVE-2016-3035
IBM AppScan Source could reveal some sensitive information through the browsing of testlinks on the server
4.4
CVE-2016-3034
IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt information more easily
–
CVE-2014-6123
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1…
–
CVE-2014-6121
Cross-site scripting (XSS) vulnerability in IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0…