CVE-2019-4217

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 could allow a remote attacker to hijack the clicking action of the victim

Medium · published June 6, 2019

CVSS v3.0
6.1
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 159226.

The record
Technical detail
CVSS v3.0
6.1 · MEDIUM
Vector
CVSS:3.0/S:C/AC:L/AV:N/PR:N/C:L/A:N/UI:R/I:L/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.01183 · 67.5th percentile
Published
2019-06-06T20:45Z
EPSS history
Timeline
  • 06 JUN 20:45Z
    IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 could allow a remote attacker to hijack the clicking action of the victim
    cvelistv5