CVE-2010-1586

medium

Description

Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/58107

https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1613

http://yehg.net/lab/pr0js/advisories/hp_system_management_homepage_url_redirection_abuse

http://www.securityfocus.com/bid/39676

Details

Source: Mitre, NVD

Published: 2010-04-28

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N