open_redirect vulnerabilities
open_redirect in numbers
sbomify tracks 2,174 open_redirect vulnerabilities. Most are found in web application (57%), server software (16%) and cms plugin (12%).
How to fix open_redirect vulnerabilities
Most exploited open_redirect vulnerabilities
- CVE-2022-2856 Google Chromium Intents Insufficient Input Validation
- CVE-2021-38000 Google Chromium Intents Improper Input Validation
- CVE-2012-0518 Oracle Fusion Middleware Unspecified
- CVE-2006-6839 Open redirect in n/a
- CVE-2026-15689 Open redirect in Dancer2::Plugin::Auth::Extensible
- CVE-2025-55031 Passkey phishing within Bluetooth range
- CVE-2025-50578 Open redirect in n/a
- CVE-2024-22891 Nteract Remote Code Execution vulnerability
- CVE-2022-31657 Open redirect in VMware Workspace ONE Access, Identity Manager and vRealize Automation
- CVE-2020-12274 Open redirect in n/a
- CVE-2026-22794 Account Takeover Vulnerability in Appsmith
- CVE-2026-70958 Open redirect in Oracle Hyperion Infrastructure Technology
Recently published
- CVE-2026-112034 aircheng-org iWebShop-5 Login Redirect _userInfo.php redirect
- CVE-2026-112040 diem-project diem Sign-In BasedmUserActions.class.php redirect
- CVE-2026-112251 antoinersx clawhost Reverse Proxy reverseProxy.ts handleRequest redirect
- CVE-2026-109937 Otter Blocks < 3.2.3 - Unauthenticated Open Redirect via Stripe Checkout Block
- CVE-2024-58398 Coder 2.3.1 before 2.16.1 Open Redirect via Login Page redirect Parameter
- CVE-2026-111931 Coder 2.0.0 before 2.34.8 Open Redirect via Workspace App Proxy
Other types of vulnerability
- Cross-site scripting54,178
- Memory corruption53,628
- Denial of service36,532
- 35,428
- Missing authorization28,513
- SQL injection23,565
- Path traversal19,236
- 16,160
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.