← Vulnerability feed
Start free
Open in platform
Vulnerability record · CVE-2016-4334 · published 10 April 2017
CVE-2016-4334: Jivesoftware jive open redirect vulnerability
Jivesoftware · Jive
Jive before 2016.3.1 has an open redirect from the external-link.jspa page.
6.1 CVSS 3.1 Medium EPSS 0.80% · top 45.2% CWE-601 · Open redirect
6.1CVSS 3.1 base score, v2 5.8
0.80%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 2 tagged exploit
17 Jun 2026Last modified by NVD
Description
Jive before 2016.3.1 has an open redirect from the external-link.jspa page.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://www.ericgoldman.name/en/2016/vulnerability-report-jive-open-redirect/ | ExploitTechnical DescriptionThird Party Advisory |
| http://www.ericgoldman.name/en/2016/vulnerability-report-jive-open-redirect/ | ExploitTechnical DescriptionThird Party Advisory |
Track CVE-2016-4334 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
7.5CVE-2021-45968Jivesoftware jive server-side request forgery (ssrf) vulnerabilityAn issue was discovered in xmppserver jar in the XMPP Server component of the JIve platform, as used in Pascom Cloud Phone System before 7.20.x (and …EPSS 10%4.7CVE-2012-0518Oracle Fusion Middleware SSO open redirect flawOracle Fusion Middleware 10.1.4.3.0 contains an unspecified open redirect vulnerability in the Application Server Single Sign-On component, tracked a…KEVEPSS 4.7%analysed6.1CVE-2021-38000Google Chrome Android Intents input validation open redirectChrome on Android before 95.0.4638.69 fails to properly validate untrusted input passed through Intents, allowing a crafted HTML page to redirect the…KEVEPSS 4.9%analysed
Source: NIST National Vulnerability Database (record CVE-2016-4334), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.
