01 Record
CVE-2014-3097
Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0-TIV-TFIM-IF0015, 6.2.1 before 6.2.1-TIV-TFIM-IF0007, and 6.2.2 before 6.2.2-TIV-TFIM-IF0011 allows remote
UnratedPUBLISHEDCNA: ibm
CNA base scoreUnratedNo CNA CVSS vector
02 Description
Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0-TIV-TFIM-IF0015, 6.2.1 before 6.2.1-TIV-TFIM-IF0007, and 6.2.2 before 6.2.2-TIV-TFIM-IF0011 allows remote
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 2.64% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 85.2% of scored records. A rank, not a probability.
- NVD base score
- The NVD has published no score for this record
- NVD CVSS vector
- No NVD score to derive
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-17.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2014-10-02 00:00Z12 YR AGO
- Last updated
- 2024-08-06 10:35Z2 YR AGO
- Reserved
- 2014-04-29
- Assigning CNA
- ibm
- Record state
- PUBLISHED
- Severity
- Not rated by the issuing CNA
- CNA CVSS vector
- Not published by the issuing CNA
- Weaknesses
- No CWE assigned
- Data version
- 5.1
- Document digest
- 24e983625290bc3b9e3ed4cce899c11713723dce3c1c450e3948c23cec8272df
05 Affected products
VendorProductVersionsPlatforms
06 References
- www-01.ibm.comIV64511http://www-01.ibm.com/support/docview.wss?uid=swg1IV64511
- www-01.ibm.comIV64349http://www-01.ibm.com/support/docview.wss?uid=swg1IV64349
- www-01.ibm.comIV64512http://www-01.ibm.com/support/docview.wss?uid=swg1IV64512
- www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21684852
- www-01.ibm.comIV64376http://www-01.ibm.com/support/docview.wss?uid=swg1IV64376
- www-01.ibm.comIV64509http://www-01.ibm.com/support/docview.wss?uid=swg1IV64509
- www-01.ibm.comIV64324http://www-01.ibm.com/support/docview.wss?uid=swg1IV64324
- www-01.ibm.comIV64497http://www-01.ibm.com/support/docview.wss?uid=swg1IV64497
- www-01.ibm.comIV64501http://www-01.ibm.com/support/docview.wss?uid=swg1IV64501
- www-01.ibm.comIV64506http://www-01.ibm.com/support/docview.wss?uid=swg1IV64506
- exchange.xforce.ibmcloud.comibm-tfim-cve20143097-open-redirect(94265)https://exchange.xforce.ibmcloud.com/vulnerabilities/94265
- www-01.ibm.comIV64325http://www-01.ibm.com/support/docview.wss?uid=swg1IV64325
- www-01.ibm.comIV64494http://www-01.ibm.com/support/docview.wss?uid=swg1IV64494