CVE-2017-1551

Summary

IBM API Connect 5.0.0.0 through 5.0.7.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 131291.

Affected Software

VendorProductVersion RangeStatus
IBMAPI Connect5.0.1.0affected
IBMAPI Connect5.0.0.0affected
IBMAPI Connect5.0.0.1affected
IBMAPI Connect5.0.2.0affected
IBMAPI Connect5.0.5.0affected
IBMAPI Connect5.0.6.0affected
IBMAPI Connect5.0.6.1affected
IBMAPI Connect5.0.6.2affected
IBMAPI Connect5.0.7.0affected
IBMAPI Connect5.0.7.1affected
IBMAPI Connect5.0.3.0affected
IBMAPI Connect5.0.4.0affected
IBMAPI Connect5.0.7.2affected

Weaknesses

  • Gain Access

ADP Enrichment

CVE Program Container

Additional References

References