CVE-2021-39054

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the victim

Medium · published December 13, 2021

CVSS v3.0
5.4
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 214525.

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/C:L/AV:N/UI:R/I:L/S:C/PR:L/A:N/AC:L/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00607 · 48.3th percentile
Published
2021-12-13T17:55Z
EPSS history
Timeline
  • 13 DEC 17:55Z
    IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the victim
    cvelistv5