{"id":"CVE-2016-0928","aliases":["EUVD-2016-0939","GHSA-56mx-v8hf-v789"],"status":"published","title":"Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6...","description":"Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.","severity":{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01383,"percentile":0.72346,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-601"],"published":"2016-09-18T01:00:00Z","modified":"2026-06-17T00:38:29Z","products":[{"vendor":"pivotal","product":"cloud_foundry_elastic_runtime"}],"references":[{"url":"https://pivotal.io/security/cve-2016-0928","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91550","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0928"},{"url":"https://github.com/advisories/GHSA-56mx-v8hf-v789"}],"sources":{"cve":[{"id":"CVE-2016-0928","description":"Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.","status":"published","published":"2016-09-18T01:00:00Z","modified":"2024-08-05T22:38:41.074Z","updated_at":"2026-11-02T14:33:37.446553Z"}],"euvd":[{"id":"EUVD-2016-0939","description":"Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.","status":"published","published":"2016-09-18T01:00:00Z","modified":"2024-08-05T22:38:41Z","updated_at":"2026-11-03T02:22:59.472257Z"}],"ghsa":[{"id":"GHSA-56mx-v8hf-v789","title":"Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6...","description":"Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.","status":"published","published":"2022-05-17T03:43:10Z","modified":"2023-01-27T05:08:08Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:43:15.040364Z"}],"nvd":[{"id":"CVE-2016-0928","description":"Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.","status":"published","published":"2016-09-18T02:59:08.997Z","modified":"2026-06-17T00:38:29.187Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:03:29.893676Z"}]}}