Lucene search
HistoryDec 19, 2013 - 10:55 p.m.
CVE-2013-5462
cve-2013-5462
ibm
ecmclient
content navigator
clickjacking
security vulnerability
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
62.0%
IBM/ECMClient/configure/explodedformat/navigator/header.jsp in IBM Content Navigator 2.0.0, 2.0.1 before 2.0.1.2-ICN-FP002, and 2.0.2 before 2.0.2.1-ICN-FP001 allows remote attackers to conduct clickjacking attacks via vectors involving FRAME elements.
Affected configurations
Node
ibmcontent_navigatorMatch2.0.0
ORibmcontent_navigatorMatch2.0.1
ORibmcontent_navigatorMatch2.0.2
Related
ibm
ibm
nvd
nvd
CVE-2013-5462
2013-12-19 22:55:04
prion
prion
Code injection
2013-12-19 22:55:00
cvelist
cvelist
CVE-2013-5462
2013-12-19 22:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
62.0%
Related for CVE-2013-5462