Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2025-24643 CVE-2025-36027 · GHSA-87hr-fvp2-3f9p

IBM Datacap clickjacking

Priority LOW 24

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00234 Published 2025-06-28 No fix listed CWE-1021
TI-2025-24642 CVE-2025-36026 · GHSA-8r4j-cg5x-mv4q

IBM Datacap information disclosure

Priority LOW 19

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 does not set the secure attribute on authorization tokens or session cookies.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00162 Published 2025-06-28 No fix listed CWE-614
TI-2024-26651 CVE-2024-39730 · GHSA-vmc8-xh9x-mm66

IBM Datacap clickjacking

Priority LOW 24

IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00245 Published 2025-06-28 No fix listed CWE-451