Skip to content
OpenAdvisories
Medium · 6.4 CVE-2018-2015 EUVD-2018-13870GHSA-cg4w-8xg5-98hg

IBM API Connect 2018.1 and 2018.4.1.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to …

Published May 2, 2019 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM API Connect 2018.1 and 2018.4.1.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 155195.

Affected products

VendorProductAffectedFixed
IBM API Connect 2018.1, 2018.4.1.4 —

References