Page 2 of 6 results (0.003 seconds)

CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0

IBM/ECMClient/configure/explodedformat/navigator/header.jsp in IBM Content Navigator 2.0.0, 2.0.1 before 2.0.1.2-ICN-FP002, and 2.0.2 before 2.0.2.1-ICN-FP001 allows remote attackers to conduct clickjacking attacks via vectors involving FRAME elements. IBM/ECMClient/configure/explodedformat/navigator/header.jsp en IBM Content Navigator 2.0.0, 2.0.1 anteriores a 2.0.1.2-ICN-FP002, y 2.0.2 anteriores a 2.0.2.1-ICN-FP001 permite a atacantes remotos conducir ataques clickjacking a través de vectores que involucran elementos FRAME. • http://www-01.ibm.com/support/docview.wss?uid=swg21660223 http://www.securitytracker.com/id/1037704 https://exchange.xforce.ibmcloud.com/vulnerabilities/88358 • CWE-20: Improper Input Validation •