CVE-2015-0127

CVE-2015-0127 affects IBM Leads (multiple versions: 7.x; 8.1.0 up to 8.1.0.14; 8.2; 8.5.0 up to 8.5.0.7.3; 8.6.0 up to 8.6.0.8.1; 9.0.0 up to 9.0.0.4; 9.1.0 up to 9.1.0.6.1; 9.1.1 up to 9.1.1.0.2). The root cause is improper restriction of FRAME elements, enabling remote authenticated users to co...

CVE-2015-0127

IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 does not properly restrict use of FRAME elements, which allows remote authenticated users to conduct phishing attacks via a crafted...