{"id":"CVE-2015-4297","aliases":["EUVD-2015-4320","GHSA-pjxg-47c8-7cr3"],"status":"published","title":"Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server (MCS) allows remote...","description":"Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server (MCS) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted HTTP request parameters, aka Bug ID CSCuv32136.","severity":{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01105,"percentile":0.65999,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2015-08-19T14:00:00Z","modified":"2026-06-17T00:27:03Z","products":[{"vendor":"cisco","product":"webex_node_for_mcs"}],"references":[{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=40427","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/76328","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4297"},{"url":"https://github.com/advisories/GHSA-pjxg-47c8-7cr3"}],"sources":{"cve":[{"id":"CVE-2015-4297","description":"Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server (MCS) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted HTTP request parameters, aka Bug ID CSCuv32136.","status":"published","published":"2015-08-19T14:00:00Z","modified":"2024-08-06T06:11:12.198Z","updated_at":"2026-11-02T14:35:43.322279Z"}],"euvd":[{"id":"EUVD-2015-4320","description":"Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server (MCS) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted HTTP request parameters, aka Bug ID CSCuv32136.","status":"published","published":"2015-08-19T14:00:00Z","modified":"2024-08-06T06:11:12Z","updated_at":"2026-11-03T02:22:04.533858Z"}],"ghsa":[{"id":"GHSA-pjxg-47c8-7cr3","title":"Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server (MCS) allows remote...","description":"Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server (MCS) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted HTTP request parameters, aka Bug ID CSCuv32136.","status":"published","published":"2022-05-17T03:44:53Z","modified":"2023-01-27T05:08:10Z","updated_at":"2026-11-02T14:43:15.619167Z"}],"nvd":[{"id":"CVE-2015-4297","description":"Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server (MCS) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted HTTP request parameters, aka Bug ID CSCuv32136.","status":"published","published":"2015-08-19T14:59:00.14Z","modified":"2026-06-17T00:27:03.943Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:08.998581Z"}]}}