CVE-2018-1599

Summary

IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 143744.

Affected Software

VendorProductVersion RangeStatus
IBMAPI Connect5.0.1.0affected
IBMAPI Connect5.0.0.0affected
IBMAPI Connect5.0.2.0affected
IBMAPI Connect5.0.5.0affected
IBMAPI Connect5.0.6.0affected
IBMAPI Connect5.0.6.1affected
IBMAPI Connect5.0.6.2affected
IBMAPI Connect5.0.7.0affected
IBMAPI Connect5.0.7.1affected
IBMAPI Connect5.0.3.0affected
IBMAPI Connect5.0.4.0affected
IBMAPI Connect5.0.7.2affected
IBMAPI Connect5.0.6.3affected
IBMAPI Connect5.0.6.4affected
IBMAPI Connect5.0.8.0affected
IBMAPI Connect5.0.8.1affected
IBMAPI Connect5.0.6.5affected
IBMAPI Connect5.0.6.6affected
IBMAPI Connect5.0.8.2affected
IBMAPI Connect5.0.8.3affected

Weaknesses

  • Cross-Site Scripting

ADP Enrichment

CVE Program Container

Additional References

References