CVE-2022-22348

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could allow a page linked to from within…

Medium · published March 14, 2022

CVSS v3.0
4.0
EPSS
0%
Percentile
8.9
In the wild
Unconfirmed
What it is

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could allow a page linked to from within Operations Center to rewrite it. An administrator could enter a link to a malicious URL that another administrator could then click. Once clicked, that malicious URL could then rewrite the original page with a phishing page. IBM X-Force ID: 220139.

The record
Technical detail
CVSS v3.0
4.0 · MEDIUM
Vector
CVSS:3.0/C:L/A:N/AV:L/I:L/S:U/UI:N/PR:N/AC:H/RL:O/E:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00196 · 8.9th percentile
Published
2022-03-14T17:00Z
EPSS history
Timeline
  • 14 MAR 17:00Z
    IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could allow a page linked to from within…
    cvelistv5