CVE-2019-4086

IBM Cloud Application Performance Management 8.1.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 157509.

Score

CVSS 3.1 6.1 Medium

Status

Modified - psirt@us.ibm.com

Published

2019-09-17

Last modified

2024-09-17

Weaknesses

CWE-1021

Affected products

• Application Performance Management (Ibm)
• Cloud Application Performance Management (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/157509
• https://www.ibm.com/support/pages/security-bulletin-ibm-application-performance-management-could-allow-remote-attacker-…