Skip to content

recorded together · Open Redirect

What Open Redirect is recorded together with

13 classes · 3 more often than chance

Open Redirect is recorded in the same CVE as 3 other classes more often than chance would give, most of all Cross-site Scripting (3.2×), Cross-Site Request Forgery (1.9×), Information Disclosure (1.6×).

Each hub is another class and each strip a pair of weaknesses, one from each class, as long as the CVEs that carry both. A hub is larger the further the pairing stands above chance. Open a class or a pair to see the CVEs.

A CVE counts when its record names a weakness from each class, neither being the other's parent. It says the two kinds of flaw are recorded together in one vulnerability more or less often than chance: not that one causes the other, and it follows how the people who file CVEs choose CWEs.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.