CVE-2014-5127: Open redirect vulnerability in Innovative Interfaces Encore Discovery Solution 4.3 allows remote attackers...

Security readout for executives and security teams

CVE-2014-5127 is an open redirect issue in Innovative Interfaces Encore Discovery Solution 4.3. An attacker could craft a link that appears to use a trusted Encore site but sends the user to another website, supporting phishing. The sources do not provide a CVSS score, confirmed patch, or active exploitation evidence. Exposure is most likely for organizations still running Encore Discovery Solution 4.3 on public library discovery portals. The provided affected-product metadata is incomplete, so teams should confirm deployed versions against vendor records and local asset inventory. Treat this as a moderate phishing-enablement risk, especially if the service is public and trusted by patrons or staff. Prioritize confirming whether Encore 4.3 is still deployed, then follow vendor guidance because the provided sources do not name a patch. Mitigation focus: Check Innovative Interfaces vendor guidance for fixed versions or supported workarounds.; Upgrade or retire Encore Discovery Solution 4.3 if vendor guidance identifies it as vulnerable.; Restrict public access where business requirements allow..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.