medium4.3
CVE-2013-5462
IBM/ECMClient/configure/explodedformat/navigator/header.jsp in IBM Content Navigator 2.0.0, 2.0.1 before 2.0.1.2-ICN-FP002, and 2.0.2 before 2.0.2.1-ICN-FP001 …
Impact
IBM/ECMClient/configure/explodedformat/navigator/header.jsp in IBM Content Navigator 2.0.0, 2.0.1 before 2.0.1.2-ICN-FP002, and 2.0.2 before 2.0.2.1-ICN-FP001 allows remote attackers to conduct clickjacking attacks via vectors involving FRAME elements.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Content Navigator | Versions 2.0.0, 2.0.1, 2.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg21660223
- http://www.securitytracker.com/id/1037704
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88358
- http://www-01.ibm.com/support/docview.wss?uid=swg21660223
- http://www.securitytracker.com/id/1037704
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88358