CVE-2011-1538

MediumCVSS 4.9/10Last modified Jun 16, 2026

Description

Open redirect vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote authenticated users to redirect other users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Metrics

CVSS 2.0 4.9/10AV:N/AC:M/Au:S/C:P/I:P/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
May 3, 2011
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2011

CVE-2011-15395.0Unspecified vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote attackers to obtain sensitive information via unknown vCVE-2011-15409.0Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote authenticated users to execute arbitrary code via CVE-2011-154110.0Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote attackers to bypass intended access restrictions, CVE-2011-15424.3Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to inject arbitrary web scriCVE-2011-15434.3Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to hijack the authentCVE-2011-15446.0Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to gain privileges via uCVE-2011-15456.8Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack thCVE-2011-15467.5Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to execute arbitrary SQL coCVE-2011-15476.8Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allowCVE-2011-15486.3The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write aCVE-2011-15496.3The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write accesCVE-2011-15506.3The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root wr
CVE-2011-1538: Medium severity, CVSS 4.9 | Vulnix