Open Redirect

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct…CVE-2015-2750Drupal · 1.8% likely

   CWE-601

2. Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module 7.x-1.x before 7.x-1.…CVE-2015-7943Drupal · 1.8% likely

   CWE-601

3. Open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL i…CVE-2015-2749Drupal · 1.8% likely

   CWE-601

4. Confirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduct open redirect attacks via unspecified vectors.CVE-2016-9451Drupal · 1.5% likely

   CWE-601

5. Drupal versions 5.x and 6.x has open redirectionCVE-2010-2471Drupal · 1.1% likely

   CWE-601

6. Open Redirect vulnerability in Drupal Core allows a user to be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL. This issue af…CVE-2020-13662Drupal · 0.9% likely

   CWE-601

7. Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007CVE-2026-55806Drupal · CVSS 5.9 · 0.3% likely

   CWE-601

8. Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135CVE-2026-87937Drupal · CVSS 6.5 · 0.3% likely

   CWE-601

9. SAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143CVE-2026-87945Drupal · CVSS 5.4 · 0.2% likely

   CWE-601

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.