IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to conduct clickjacking or other client-side browser attacks.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
ibm infosphere information server 11.5 |
||
ibm infosphere information server 9.1 |
||
ibm infosphere information server on cloud 11.5 |
||
ibm infosphere information server 8.7 |
||
ibm infosphere information server 11.3 |