{"id":"CVE-2016-1389","aliases":["EUVD-2016-2488","GHSA-h3rw-6j23-h8mc"],"status":"published","title":"Open redirect vulnerability in Cisco WebEx Meetings Server (CWMS) 2.6 allows remote attackers to...","description":"Open redirect vulnerability in Cisco WebEx Meetings Server (CWMS) 2.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuy44695.","severity":{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01321,"percentile":0.7106,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2016-04-28T22:00:00Z","modified":"2026-06-17T00:41:50Z","products":[{"vendor":"cisco","product":"webex_meetings_server"}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-cwms","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035703","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1389"},{"url":"https://github.com/advisories/GHSA-h3rw-6j23-h8mc"}],"sources":{"cve":[{"id":"CVE-2016-1389","description":"Open redirect vulnerability in Cisco WebEx Meetings Server (CWMS) 2.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuy44695.","status":"published","published":"2016-04-28T22:00:00Z","modified":"2024-08-05T22:55:14.563Z","updated_at":"2026-11-02T14:33:35.841056Z"}],"euvd":[{"id":"EUVD-2016-2488","description":"Open redirect vulnerability in Cisco WebEx Meetings Server (CWMS) 2.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuy44695.","status":"published","published":"2016-04-28T22:00:00Z","modified":"2024-08-05T22:55:14Z","updated_at":"2026-11-03T02:22:57.428811Z"}],"ghsa":[{"id":"GHSA-h3rw-6j23-h8mc","title":"Open redirect vulnerability in Cisco WebEx Meetings Server (CWMS) 2.6 allows remote attackers to...","description":"Open redirect vulnerability in Cisco WebEx Meetings Server (CWMS) 2.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuy44695.","status":"published","published":"2022-05-17T03:31:56Z","modified":"2023-01-27T05:08:03Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T14:43:14.514072Z"}],"nvd":[{"id":"CVE-2016-1389","description":"Open redirect vulnerability in Cisco WebEx Meetings Server (CWMS) 2.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuy44695.","status":"published","published":"2016-04-28T22:59:01.273Z","modified":"2026-06-17T00:41:50.973Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:23.795791Z"}]}}