CVE-2016-9010

MEDIUM Year: 2016
CVSS v3 Score
6.1
Medium
CVSS v2 Score
4.3
Medium
Weakness Type
CWE-254
View all →

Vulnerability Description

IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM Reference #: 1997906.

Related Vulnerabilities

CVE-2016-0734

MEDIUM
CVSS:6.1(Medium)

The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a...

CWE-2542016

CVE-2016-0832

MEDIUM
CVSS:6.1(Medium)

Setup Wizard in Android 5.1.x before LMY49H and 6.x before 2016-03-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified ...

CWE-2542016

CVE-2016-1140

MEDIUM
CVSS:6.1(Medium)

KDDI HOME SPOT CUBE devices before 2 allow remote attackers to conduct clickjacking attacks via unspecified vectors.

CWE-2542016

CVE-2016-1177

MEDIUM
CVSS:6.1(Medium)

The management screen in Falcon WisePoint 4.3.1 and earlier and WisePoint Authenticator 4.1.19.22 and earlier allows remote attackers to conduct clickjacking attacks via unspecified vectors.

CWE-2542016

CVE-2016-1682

MEDIUM
CVSS:6.1(Medium)

The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote ...

CWE-2542016

CVE-2016-2072

MEDIUM
CVSS:6.1(Medium)

The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.1305...

CWE-2542016