VYPR
← All advisories
Medium severity6.1NVD Advisory· Published May 3, 2017· Updated Jun 17, 2026

CVE-2016-10368

CVE-2016-10368

Description

Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the back parameter to the /login URI.

Affected products

5
  • Opsview/Opsview4 versions
    cpe:2.3:a:opsview:opsview:4.5.0:*:*:*:pro:*:*:*+ 3 more
    • cpe:2.3:a:opsview:opsview:4.5.0:*:*:*:pro:*:*:*
    • cpe:2.3:a:opsview:opsview:4.6.4:*:*:*:pro:*:*:*
    • cpe:2.3:a:opsview:opsview:5.0.2:*:*:*:pro:*:*:*
    • cpe:2.3:a:opsview:opsview:5.1.0:*:*:*:pro:*:*:*
  • Opsview/Monitorllm-fuzzy
    Range: <5.1.0.162300841, <5.0.2.27475, <4.6.4.162391051, 4.5.x without a certain 2016 security patch

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.