NetSight
medium5.4

CVE-2018-1599

IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to hijack the clicking action of the victim.

Impact

IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 143744.

Affected products

VendorProductAffected versions
IbmApi Connect
from 5.0.0.0 through 5.0.8.3
from 2018.1 through 2018.3.4

Weakness classification

References