# open_redirect


- [CVE-2022-2856](https://insights.sbomify.com/CVE-2022-2856/): Google Chromium Intents Insufficient Input Validation (medium 6.5, exploited in the wild)
- [CVE-2021-38000](https://insights.sbomify.com/CVE-2021-38000/): Google Chromium Intents Improper Input Validation (medium 6.1, exploited in the wild)
- [CVE-2012-0518](https://insights.sbomify.com/CVE-2012-0518/): Oracle Fusion Middleware Unspecified (medium 4.7, exploited in the wild)
- [CVE-2006-6839](https://insights.sbomify.com/CVE-2006-6839/): Open redirect in n/a (critical 10.0)
- [CVE-2026-15689](https://insights.sbomify.com/CVE-2026-15689/): Open redirect in Dancer2::Plugin::Auth::Extensible (critical 9.8)
- [CVE-2025-55031](https://insights.sbomify.com/CVE-2025-55031/): Passkey phishing within Bluetooth range (critical 9.8)
- [CVE-2025-50578](https://insights.sbomify.com/CVE-2025-50578/): Open redirect in n/a (critical 9.8)
- [CVE-2024-22891](https://insights.sbomify.com/CVE-2024-22891/): Nteract Remote Code Execution vulnerability (critical 9.8)
- [CVE-2022-31657](https://insights.sbomify.com/CVE-2022-31657/): Open redirect in VMware Workspace ONE Access, Identity Manager and vRealize Automation (critical 9.8)
- [CVE-2020-12274](https://insights.sbomify.com/CVE-2020-12274/): Open redirect in n/a (critical 9.8)
- [CVE-2026-22794](https://insights.sbomify.com/CVE-2026-22794/): Account Takeover Vulnerability in Appsmith (critical 9.7)
- [CVE-2026-70958](https://insights.sbomify.com/CVE-2026-70958/): Open redirect in Oracle Hyperion Infrastructure Technology (critical 9.6)

---
From sbomify Insights: https://insights.sbomify.com/types/open-redirect/