CVE-2021-38123

Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication.
Open Redirect
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
microfocusCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 46%
VendorProductVersion
microfocusnetwork_automation
10.40
microfocusnetwork_automation
10.50
microfocusnetwork_automation
2018.05
microfocusnetwork_automation
2018.11
microfocusnetwork_automation
2019.05
microfocusnetwork_automation
2020.02
microfocusnetwork_automation
2020.08
microfocusnetwork_automation
2020.11
microfocusnetwork_automation
2021.05
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://portal.microfocus.com/s/article/KM000001673
https://portal.microfocus.com/s/article/KM000001673