CVE-2017-3889: Cisco Registered Envelope Service

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to redirect a user to a undesired web page, aka an Open Redirect. This vulnerability affects the Cisco Registered Envelope cloud-based service. More Information: CSCvc60123. Known Affected Releases: 5.1.0-015.

Affected products

• Cisco Registered Envelope Service: version 5.1.0-015 only

Published 2017-04-07. Last modified 2026-06-17.