CVE-2009-0347: Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine allows rem...

Security readout for executives and security teams

This CVE is an open redirect in Autonomy/Verity Ultraseek cs.html. An attacker could make a trusted search-site URL send users to an arbitrary external site, supporting phishing. The bundle does not show code execution, data theft by itself, or a confirmed vendor patch. Most likely exposure is legacy, internet-facing Autonomy/Verity Ultraseek search deployments with the cs.html endpoint enabled. The source bundle does not identify affected versions, CPEs, or current product support status. Treat this as a targeted phishing-enablement risk, not an infrastructure compromise by itself. Prioritize if Ultraseek is public-facing on a trusted corporate domain or appears in phishing telemetry. Mitigation focus: Check Autonomy/Ultraseek vendor or archival guidance for fixed versions or configuration workarounds.; Disable or remove public access to vulnerable Ultraseek cs.html where feasible.; Restrict redirect destinations to approved internal hosts if the feature is still required..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.