Description

IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 183315.

Remediation

References

CVE-2020-4547

Related Vulnerabilities

WebLogic CVE-2020-2967 Vulnerability (CVE-2020-2967)

YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-2829)

WordPress Plugin WP DSGVO Tools (GDPR) PHP Object Injection (2.0.4)

WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.21)

WordPress Plugin Directories Pro Cross-Site Scripting (1.3.45)

Severity

Medium

Classification

CVE-2020-4547 CWE-1021 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N

Tags

Missing Update Known Vulnerabilities