Unscored severity · published Jan 29, 2009
CVE-2009-0347
Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine allows remote attackers to redirect users to arbitrary web sites and conduct…
–
CVSS
10.9%
EPSS
No
On KEV
Description
Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.9% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UL
Ultraseek · Autonomy
_nil_ · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0347
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0347
sunbeltblog.blogspot.com
http://sunbeltblog.blogspot.com/2009/01/constant-stream-of-ultraseek-redirects.html
US Government Resource
http://www.kb.cert.org/vuls/id/202753
www.securityfocus.com
http://www.securityfocus.com/bid/33500
www.ultraseek.com
http://www.ultraseek.com/forums/thread.jspa?messageID=9818
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/48336