CVE-2024-30109CWE-1021

Lack of Clickjacking Protection vulnerability affects DRYiCE AEX v10

Low · published June 28, 2024

CVSS v3.1
3.7
EPSS
0%
Percentile
29.1
In the wild
Unconfirmed
What it is

HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or link on another page than the one intended.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00364 · 29.1th percentile
Weakness
CWE-1021 · Improper Restriction of Rendered UI Layers or Frames
Published
2024-06-28T05:40Z
EPSS history
Timeline
  • 28 JUN 05:40Z
    Lack of Clickjacking Protection vulnerability affects DRYiCE AEX v10
    cvelistv5