Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe
Filtered by product Identity Manager
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-2880 1 Oracle 1 Identity Manager 2014-10-17 5.8 MEDIUM N/A
Open redirect vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backUrl parameter in a changepwd action to identity/faces/firstlogin.