CVE-2021-29827

MEDIUM Year: 2021
CVSS v3 Score
5.2
Medium
Weakness Type
CWE-1021
View all →

Vulnerability Description

IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.

Related Vulnerabilities

CVE-2021-27375

MEDIUM
CVSS:5.3(Medium)

Traefik before 2.4.5 allows the loading of IFRAME elements from other domains.

CWE-10212021

CVE-2023-34658

MEDIUM
CVSS:5.3(Medium)

Telegram v9.6.3 on iOS allows attackers to hide critical information on the User Interface via calling the function SFSafariViewController.

CWE-10212023

CVE-2024-4950

MEDIUM
CVSS:5.3(Medium)

Inappropriate implementation in Downloads in Google Chrome prior to 125.0.6422.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted ...

CWE-10212024

CVE-2024-6466

MEDIUM
CVSS:5.3(Medium)

NEC Corporation's WebSAM DeploymentManager v6.0 to v6.80 allows an attacker to reset configurations or restart products via network with X-FRAME-OPTIONS is not specified.

CWE-10212024

CVE-2025-32385

MEDIUM
CVSS:5.3(Medium)

EspoCRM is an Open Source Customer Relationship Management software. Prior to 9.0.5, Iframe dashlet allows user to display iframes with arbitrary URLs. As the sandbox attribute is not included in the ...

CWE-10212025

CVE-2019-4285

MEDIUM
CVSS:5.4(Medium)

IBM WebSphere Application Server - Liberty Admin Center could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attack...

CWE-10212019