CVE-2014-6255

MEDIUM · CVSS 6.4 EPSS 2.07%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-12-15 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2014-6255

Severity

MEDIUM

CVSS

6.4

EPSS

2.07%

Original Filing — NVD Description

Open redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the came_from parameter, aka ZEN-11998.