CVEvulnerability
CVE-2013-4066
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-10-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-20
Description
IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface.
Affected configurations
• ibm infosphere information server 8.0
• ibm infosphere information server 8.1
• ibm infosphere information server 8.5
• ibm infosphere information server 8.5.0.1
• ibm infosphere information server 8.5.0.2
• ibm infosphere information server 8.5.0.3
• ibm infosphere information server 8.7
• ibm infosphere information server 9.1
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.ibm.com/support/docview.wss?uid=swg21651343 Vendor Advisory
- http://www.securityfocus.com/bid/62767 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86597 exchange.xforce.ibmcloud.com
- http://www.ibm.com/support/docview.wss?uid=swg21651343 Vendor Advisory
- http://www.securityfocus.com/bid/62767 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86597 exchange.xforce.ibmcloud.com