CWE-601 · Open Redirect
Open Redirect
1,777CVEs
2exploited
127with a public check
12likely (EPSS 10%+)
SortMost likely exploited
1,777 CVEs with CWE-601 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-38000In CISA KEVExploitedInsufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a c…Google · Chrome · CVSS 6.1 · 2021-11-23 | 6.1 | 4.9% | 2021-11-23 |
| CVE-2012-0518In CISA KEVExploitedUnspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown…Oracle · Fusion Middleware · CVSS 4.7 · 2012-10-16 | 4.7 | 4.7% | 2012-10-16 |
| CVE-2018-11784CheckApache Tomcat - Open RedirectApache Software Foundation · Apache Tomcat · 2018-10-04 | – | 98% | 2018-10-04 |
| CVE-2021-22881CheckRuby on Rails - Open Redirect via Host Header InjectionRubyonrails · https://github.com/rails/rails · 2021-02-11 | – | 87% | 2021-02-11 |
| CVE-2019-10098CheckApache HTTP server v2.4.0 to v2.4.39 - Open RedirectApache · Apache HTTP Server · 2019-09-25 | – | 74% | 2019-09-25 |
| CVE-2025-6197CheckOpen Redirect via Organization SwitchingGrafana · Grafana · CVSS 4.2 · 2025-07-18 | 4.2 | 70% | 2025-07-18 |
| CVE-2021-22873CheckRevive Adserver <5.1.0 - Open RedirectRevive-Adserver · https://github.com/revive-adserver/revive-adserver · 2021-01-21 | – | 70% | 2021-01-21 |
| CVE-2023-32068CheckXWiki - Open Redirectxwiki · xwiki-platform · CVSS 4.7 · 2023-05-15 | 4.7 | 56% | 2023-05-15 |
| CVE-2022-1058CheckGitea <1.16.5 - Open Redirectgo-gitea · go-gitea/gitea · CVSS 7.2 · 2022-03-24 | 7.2 | 53% | 2022-03-24 |
| CVE-2008-1547CheckMicrosoft OWA Exchange Server 2003 - 'redir.asp' Open RedirectionMicrosoft · Exchange Server · 2008-10-21 | – | 48% | 2008-10-21 |
| CVE-2023-5375CheckMosparo < 1.0.2 - Open Redirectmosparo · mosparo/mosparo · CVSS 4.3 · 2023-10-04 | 4.3 | 39% | 2023-10-04 |
| CVE-2023-33405CheckBlogEngine CMS - Open RedirectBlogengine · Blogengine.net · CVSS 6.1 · 2023-06-21 | 6.1 | 31% | 2023-06-21 |
| CVE-2024-5936CheckPrivateGPT < 0.5.0 - Open Redirectimartinez · imartinez/privategpt · CVSS 4.3 · 2024-06-27 | 4.3 | 30% | 2024-06-27 |
| CVE-2023-6389CheckWordPress Toolbar <= 2.2.6 - Open RedirectAbhinavsingh · WordPress Toolbar · CVSS 6.1 · 2024-01-29 | 6.1 | 27% | 2024-01-29 |
| CVE-2021-3654CheckNova noVNC - Open RedirectOpenstack · openstack-nova · 2022-03-02 | – | 27% | 2022-03-02 |
| CVE-2018-14574CheckDjango - Open RedirectDjangoproject · Django · 2018-08-03 | – | 25% | 2018-08-03 |
| CVE-2023-0552CheckWordPress Pie Register <3.8.2.3 - Open RedirectGenetechsolutions · Registration Forms · CVSS 5.4 · 2023-02-27 | 5.4 | 24% | 2023-02-27 |
| CVE-2021-29622CheckPrometheus - Open Redirectprometheus · prometheus · CVSS 6.5 · 2021-05-19 | 6.5 | 20% | 2021-05-19 |
| CVE-2021-46379CheckD-Link DIR850 ET850-1.08TRb03 - Open RedirectDlink · Dir-850l Firmware · 2022-03-04 | – | 16% | 2022-03-04 |
| CVE-2017-3528CheckOracle E-Business Suite 12.1.3/12.2.x - Open RedirectOracle Corporation · Applications Framework · 2017-04-24 | – | 15% | 2017-04-24 |
| CVE-2020-22840Checkb2evolution CMS <6.11.6 - Open RedirectB2evolution · B2evolution · 2021-02-09 | – | 14% | 2021-02-09 |
| CVE-2021-20031CheckSonicWall SonicOS 7.0 - Open RedirectSonicWall · SonicOS · 2021-10-12 | – | 13% | 2021-10-12 |
| CVE-2015-5354CheckNovius OS 5.0.1-elche - Open RedirectNovius-Os · Novius Os · 2015-07-01 | – | 12% | 2015-07-01 |
| CVE-2021-41826CheckPlaceOS 1.2109.1 - Open RedirectionPlace · Placeos Authentication · 2021-09-29 | – | 12% | 2021-09-29 |
| CVE-2020-11529CheckGrav < 1.7 - Open RedirectGetgrav · Grav · 2020-04-04 | – | 11% | 2020-04-04 |
| CVE-2013-2621CheckTelaen => v1.3.1 - Open RedirectTelaen Project · Telaen · 2020-02-03 | – | 11% | 2020-02-03 |
| CVE-2019-1943CheckCisco Small Business 200,300 and 500 Series Switches - Open RedirectCisco · Cisco Small Business 300 Series Managed Switches · CVSS 4.7 · 2019-07-17 | 4.7 | 9.7% | 2019-07-17 |
| CVE-2019-7275CheckOptergy Proton/Enterprise Building Management System - Open RedirectOptergy · Enterprise · 2019-07-01 | – | 9.0% | 2019-07-01 |
| CVE-2014-9617CheckNetsweeper 3.0.6 - Open RedirectionNetsweeper · Netsweeper · 2020-02-19 | – | 8.0% | 2020-02-19 |
| CVE-2020-15129CheckTraefik - Open Redirectcontainous · traefik · CVSS 6.1 · 2020-07-30 | 6.1 | 8.0% | 2020-07-30 |
| CVE-2020-11034CheckGLPI <9.4.6 - Open Redirectglpi-project · GLPI · CVSS 6.1 · 2020-05-05 | 6.1 | 7.6% | 2020-05-05 |
| CVE-2015-4668CheckXsuite <=2.4.4.5 - Open RedirectXceedium · Xsuite · 2017-09-25 | – | 6.7% | 2017-09-25 |
| CVE-2019-3912CheckLabKey Server Community Edition <18.3.0 - Open RedirectTenable · LabKey Server Community Edition · 2019-01-30 | – | 5.0% | 2019-01-30 |
| CVE-2020-24550CheckEpiServer Find <13.2.7 - Open RedirectEpiserver · Find · 2021-03-31 | – | 4.7% | 2021-03-31 |
| CVE-2022-23102CheckSINEMA Remote Connect Server < V2.0 - Open RedirectSiemens · SINEMA Remote Connect Server · 2022-02-09 | – | 4.7% | 2022-02-09 |
| CVE-2019-14223CheckAlfresco Share - Open RedirectAlfresco · Alfresco · 2019-09-06 | – | 4.5% | 2019-09-06 |
| CVE-2021-44528CheckOpen Redirect in Host Authorization MiddlewareRubyonrails · https://github.com/rails/rails · 2022-01-07 | – | 4.4% | 2022-01-07 |
| CVE-2022-0165CheckWordPress Page Builder KingComposer <=2.9.6 - Open RedirectKing-Theme · Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme · 2022-03-14 | – | 4.3% | 2022-03-14 |
| CVE-2022-29272CheckNagios XI <5.8.5 - Open RedirectNagios · Nagios Xi · 2022-06-29 | – | 4.2% | 2022-06-29 |
| CVE-2019-1010290CheckBabel - Open RedirectBabel: Multilingual site · Babel · 2019-07-16 | – | 4.1% | 2019-07-16 |
| CVE-2018-17422CheckDotCMS < 5.0.2 - Open RedirectDotcms · Dotcms · 2019-03-07 | – | 3.7% | 2019-03-07 |
| CVE-2019-9915CheckGetSimple CMS 3.3.13 - Open RedirectGet-Simple. · Getsimplecms · 2019-03-21 | – | 3.6% | 2019-03-21 |
| CVE-2021-39501CheckEyouCMS 1.5.4 Open RedirectEyoucms · Eyoucms · 2021-09-07 | – | 3.6% | 2021-09-07 |
| CVE-2018-6200CheckvBulletin - Open RedirectVbulletin · Vbulletin · 2018-01-25 | – | 3.5% | 2018-01-25 |
| CVE-2018-1000671CheckSympa version =>6.2.16 - Cross-Site ScriptingSympa · Sympa · 2018-09-06 | – | 3.4% | 2018-09-06 |
| CVE-2017-12138CheckXOOPS Core 2.5.8 - Open RedirectXoops · Xoops · 2017-08-02 | – | 3.4% | 2017-08-02 |
| CVE-2022-0692CheckRudloff alltube prior to 3.0.1 - Open Redirectrudloff · rudloff/alltube · CVSS 4.7 · 2022-02-21 | 4.7 | 3.4% | 2022-02-21 |
| CVE-2018-12300CheckSeagate NAS OS 4.3.15.1 - Open RedirectSeagate · Nas Os · 2019-05-13 | – | 3.2% | 2019-05-13 |
| CVE-2022-40083CheckLabstack Echo 4.8.0 - Open RedirectLabstack · Echo · CVSS 9.6 · 2022-09-28 | 9.6 | 3.2% | 2022-09-28 |
| CVE-2018-12675CheckSV3C HD Camera L Series - Open RedirectSv3c · H.264 Poe Ip Camera Firmware · 2018-10-19 | – | 3.1% | 2018-10-19 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.