Vulnerability Details CVE-2017-1000027
Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.021
EPSS Ranking 83.3%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 5.8
References
Products affected by CVE-2017-1000027
-
cpe:2.3:a:koozali:sme_server:10.0
-
cpe:2.3:a:koozali:sme_server:8.0
-
cpe:2.3:a:koozali:sme_server:9.0
-
cpe:2.3:a:koozali:sme_server:9.2