CVE-2024-39730CWE-451
IBM Datacap clickjacking
Medium · published June 28, 2025
What it is
IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
The record
Technical detail
- CVSS v3.1
- 5.4 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00239 · 14.2th percentile
- Weakness
- CWE-451 · User Interface (UI) Misrepresentation of Critical Information
- Published
- 2025-06-28T00:36Z
EPSS history
Timeline
28 JUN 00:36Z
IBM Datacap clickjacking
cvelistv5