VYPR
← All advisories
Medium severity6.1NVD Advisory· Published May 3, 2017· Updated May 13, 2026

CVE-2016-10368

CVE-2016-10368

Description

Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the back parameter to the /login URI.

Affected products

4
  • Opsview/Opsview4 versions
    cpe:2.3:a:opsview:opsview:4.5.0:*:*:*:pro:*:*:*+ 3 more
    • cpe:2.3:a:opsview:opsview:4.5.0:*:*:*:pro:*:*:*
    • cpe:2.3:a:opsview:opsview:4.6.4:*:*:*:pro:*:*:*
    • cpe:2.3:a:opsview:opsview:5.0.2:*:*:*:pro:*:*:*
    • cpe:2.3:a:opsview:opsview:5.1.0:*:*:*:pro:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.