CVE-2015-0599

Cisco UCS C-Series Rack Servers’ Integrated Management Controller web interface is vulnerable to cross-frame scripting due to insufficient iframe protection. An unauthenticated, remote attacker can lure a user to a malicious page containing iframes, enabling clickjacking or other client-side atta...

Cisco UCS C-Series Rack Servers Integrated Management Controller Cross-Frame Scripting Vulnerability

A vulnerability in the web interface of the Cisco Integrated Management Controller of the Cisco Unified Computing System C-Series Rack Servers could allow an unauthenticated, remote attacker to execute a cross-frame scripting XFS attack. The vulnerability is due to insufficient HTML iframe...

PT-2015-4743

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller in Cisco Unified Computing System UCS on C-Series Rack Servers affected versions not specified Description The issue is related to the web interface in Cisco Integrated Management Controller, which does n...

CVE-2015-0599: Undefined Security Weakness

The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System UCS on C-Series Rack Servers does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web...

Oracle Solaris Third-Party Patch Update : samba (multiple_vulnerabilities_in_samba_web)

The remote Solaris system is missing necessary patches to address security updates : - The Samba Web Administration Tool SWAT in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a 1 FRAME or 2 IFRAME element...

CVE-2014-6197

IBM Security Network Protection 5.1.x and 5.2.x before 5.2.0.0 FP5 and 5.3.x before 5.3.0.0 FP1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

Code injection

IBM Security Network Protection 5.1.x and 5.2.x before 5.2.0.0 FP5 and 5.3.x before 5.3.0.0 FP1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2014-6197

IBM Security Network Protection 5.1.x and 5.2.x before 5.2.0.0 FP5 and 5.3.x before 5.3.0.0 FP1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2014-6197

CVE-2014-6197 affects IBM Security Network Protection (XGS) models 3100, 4100, 5100, 7100. The vulnerability is a remote clickjacking issue that could allow an attacker to hijack a victim’s clicks when visiting a malicious page. Affected firmware versions include 5.1, 5.1.1, 5.1.2, 5.1.2.1, 5.2, ...

CVE-2014-6197: Improper Input Validation

IBM Security Network Protection 5.1.x and 5.2.x before 5.2.0.0 FP5 and 5.3.x before 5.3.0.0 FP1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

PT-2015-3835

Name of the Vulnerable Software and Affected Versions IBM Security Network Protection versions 5.1.x through 5.2.x before 5.2.0.0 FP5 IBM Security Network Protection versions 5.3.x before 5.3.0.0 FP1 Description The issue allows remote attackers to conduct clickjacking attacks via unspecified...

e107 2.0 Alpha2 Cross Site Request Forgery

Advisory: CSRF vulnerability in CMS e107 v.2 alpha2 Advisory ID: SROEADV-2014-04 Author: Steffen Rösemann Affected Software: CMS e107 v.2 alpha2 Release-Date: 08th-Jun-2014 Vendor URL: http://e107.org Vendor Status: solved CVE-ID: - ========================== Vulnerability Description:...

IBM Security Access Manager Clickjacking Vulnerability

IBM Security Access Manager software is a highly scalable user authentication, authorization and Web SSO solution for implementing security policies on a variety of Web and application resources, centralized management of online portals. A clickjacking vulnerability exists in IBM Security Access...

IBM WebSphere Application Server Clickjacking Vulnerability

IBM WebSphere Application Server is developed by IBM in accordance with open standards and issued an application server. A clickjacking vulnerability in IBM WebSphere Application Server versions 7.x prior to 7.0.0.37, 8.0.x prior to 8.0.0.10, and 8.5.x prior to 8.5.5.4 allows remote attackers to...

CVE-2014-6135

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

Code injection

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2014-6135

CVE-2014-6135 affects IBM Security AppScan Enterprise, specifically versions 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001. The issue allows remote attackers to perform clickjacking ...

CVE-2014-6135

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2014-6135: Improper Input Validation

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

PT-2014-7061

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Enterprise versions 8.5 through 8.5 before IFix 002 IBM Security AppScan Enterprise versions 8.6 through 8.6 before IFix 004 IBM Security AppScan Enterprise versions 8.7 through 8.7 before IFix 004 IBM Security AppScan...