# CWE-1021. Every Advisory and CVE whose sources give the weakness CWE-1021, newest first. ## Records, newest first (an older page) - [Android Intent confirmation prompt tapjacking using Select options](https://agentprime.io/advisories/CVE-2025-1940.md) `CVE-2025-1940` · CVE record: Mozilla Firefox · CVSS 7.1 High · Not analysed yet · Published 4 Mar 2025 · Tags: CWE-1021 - [Missing Defense in Depth Against Clickjacking in SAP Commerce Backoffice](https://agentprime.io/advisories/CVE-2025-24874.md) `CVE-2025-24874` · CVE record: SAP_SE SAP Commerce (Backoffice) · CVSS 6.8 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-1021 - [IBM ApplinX Clickjacking](https://agentprime.io/advisories/CVE-2024-49796.md) `CVE-2024-49796` · CVE record: IBM ApplinX · CVSS 5.4 Medium · Not analysed yet · Published 5 Feb 2025 · Tags: CWE-1021 - [Fullscreen notification not properly displayed](https://agentprime.io/advisories/CVE-2025-1019.md) `CVE-2025-1019` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 4 Feb 2025 · Tags: CWE-1021 - [Fullscreen notification is not displayed when fullscreen is re-requested](https://agentprime.io/advisories/CVE-2025-1018.md) `CVE-2025-1018` · CVE record: Mozilla Firefox and 1 more · CVSS 7.3 High · Not analysed yet · Published 4 Feb 2025 · Tags: CWE-1021 - [Clickjacking in NEC Corporation WebSAM DeploymentManager](https://agentprime.io/advisories/CVE-2024-6466.md) `CVE-2024-6466` · CVE record: NEC Corporation WebSAM DeploymentManager · CVSS 5.3 Medium · Not analysed yet · Published 21 Jan 2025 · Tags: CWE-1021 - [nbgrader's \`frame-ancestors: self\` grants all users access to formgrader](https://agentprime.io/advisories/GHSA-fcr8-4r9f-r66m.md) `GHSA-fcr8-4r9f-r66m`, `CVE-2025-23205`, `PYSEC-2026-1692` · PyPI `nbgrader`: affected `>=0.9.4, <0.9.5`, fixed in `0.9.5` · CVSS 6.9 Medium · Not analysed yet · Published 17 Jan 2025 · Tags: Information disclosure, CWE-1021 - [Clickjacking vulnerability in typecho v1.2.1.](https://agentprime.io/advisories/CVE-2024-57369.md) `CVE-2024-57369` · CVE record · CVSS 6.4 Medium · Not analysed yet · Published 17 Jan 2025 · Tags: CWE-1021 - [Clickjacking in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-56436.md) `CVE-2024-56436` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 8 Jan 2025 · Tags: CWE-1021 - [Clickjacking in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-56435.md) `CVE-2024-56435` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 8 Jan 2025 · Tags: CWE-1021 - [IBM InfoSphere Information Server clickjacking](https://agentprime.io/advisories/CVE-2021-29827.md) `CVE-2021-29827` · CVE record: IBM InfoSphere Information Server · CVSS 5.2 Medium · Not analysed yet · Published 18 Dec 2024 · Tags: CWE-1021 - [Content Security Policy appears to be missing in software and production setup](https://agentprime.io/advisories/CVE-2024-55888.md) `CVE-2024-55888` · CVE record: scidsg hushline · CVSS 7.1 High · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-1021 - [Clickjacking in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54112.md) `CVE-2024-54112` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-1021 - [Clickjacking in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-54110.md) `CVE-2024-54110` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 12 Dec 2024 · Tags: CWE-1021 - [Clickjacking in Mozilla Firefox for iOS](https://agentprime.io/advisories/CVE-2024-53976.md) `CVE-2024-53976` · CVE record: Mozilla Firefox for iOS · CVSS 5.4 Medium · Not analysed yet · Published 26 Nov 2024 · Tags: CWE-1021 - [Clickjacking in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2024-11695.md) `CVE-2024-11695` · CVE record: Mozilla Firefox and 2 more · CVSS 5.4 Medium · Not analysed yet · Published 26 Nov 2024 · Tags: CWE-1021 - [Clickjacking in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2024-11700.md) `CVE-2024-11700` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 26 Nov 2024 · Tags: CWE-1021 - [Improper Restriction of Rendered UI Layers or Frames in GitLab](https://agentprime.io/advisories/CVE-2024-7404.md) `CVE-2024-7404` · CVE record: GitLab GitLab · CVSS 6.8 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: CWE-1021 - [Clickjacking in Google Android](https://agentprime.io/advisories/CVE-2024-43084.md) `CVE-2024-43084` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-1021 - [Clickjacking vulnerability in Clibo Manager](https://agentprime.io/advisories/CVE-2024-10454.md) `CVE-2024-10454` · CVE record: Clibo Manager Clibo Manager · CVSS 6.1 Medium · Not analysed yet · Published 31 Oct 2024 · Tags: CWE-1021 - [Clickjacking in Mozilla Firefox for iOS](https://agentprime.io/advisories/CVE-2024-10004.md) `CVE-2024-10004` · CVE record: Mozilla Firefox for iOS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2024 · Tags: CWE-1021 - [Clickjacking in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2024-9397.md) `CVE-2024-9397` · CVE record: Mozilla Firefox and 2 more · CVSS 6.1 Medium · Not analysed yet · Published 1 Oct 2024 · Tags: CWE-1021 - [Clickjacking in Mozilla Firefox](https://agentprime.io/advisories/CVE-2024-8388.md) `CVE-2024-8388` · CVE record: Mozilla Firefox · CVSS 4.3 Medium · Not analysed yet · Published 3 Sept 2024 · Tags: CWE-1021 - [Clickjacking in Mozilla Firefox](https://agentprime.io/advisories/CVE-2024-7523.md) `CVE-2024-7523` · CVE record: Mozilla Firefox · CVSS 6.3 Medium · Not analysed yet · Published 6 Aug 2024 · Tags: CWE-1021 - [Clickjacking in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2024-7518.md) `CVE-2024-7518` · CVE record: Mozilla Firefox and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 6 Aug 2024 · Tags: CWE-1021 - [Discourse allows iframe injection though default site setting](https://agentprime.io/advisories/CVE-2024-39320.md) `CVE-2024-39320` · CVE record: discourse discourse · CVSS 6.1 Medium · Not analysed yet · Published 30 Jul 2024 · Tags: Other injection, CWE-1021 - [Clickjacking in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-40817.md) `CVE-2024-40817` · CVE record: Apple Safari and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 29 Jul 2024 · Tags: CWE-1021 - [Clickjacking in Google Chrome](https://agentprime.io/advisories/CVE-2023-7013.md) `CVE-2023-7013` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 16 Jul 2024 · Tags: CWE-1021 - [Clickjacking in Google Android](https://agentprime.io/advisories/CVE-2024-31324.md) `CVE-2024-31324` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-1021 - [Improper Restriction of Rendered UI Layers or Frames in GitLab](https://agentprime.io/advisories/CVE-2024-2177.md) `CVE-2024-2177` · CVE record: GitLab GitLab · CVSS 6.8 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-1021 - [Lack of Clickjacking Protection vulnerability affects DRYiCE AEX v10](https://agentprime.io/advisories/CVE-2024-30109.md) `CVE-2024-30109` · CVE record: HCL Software DRYiCE AEX · CVSS 3.7 Low · Not analysed yet · Published 28 Jun 2024 · Tags: CWE-1021 - [IBM Sterling B2B Integrator Standard Edition tapjacking](https://agentprime.io/advisories/CVE-2023-42011.md) `CVE-2023-42011` · CVE record: IBM Sterling B2B Integrator Standard Edition · CVSS 4.3 Medium · Not analysed yet · Published 27 Jun 2024 · Tags: CWE-1021 - [LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page.](https://agentprime.io/advisories/CVE-2024-33377.md) `CVE-2024-33377` · CVE record · CVSS 8.1 High · Not analysed yet · Published 14 Jun 2024 · Tags: CWE-1021 - [A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application's failure to set appropriate X-Frame-Options or Content-Security-Policy HTTP headers...](https://agentprime.io/advisories/GHSA-mq73-g4qr-fgcq.md) `GHSA-mq73-g4qr-fgcq`, `CVE-2024-2383`, `PYSEC-2024-194` · PyPI `zenml`: affected `<0.56.3`, fixed in `0.56.3` · CVSS 4.3 Medium · Not analysed yet · Published 6 Jun 2024 · Tags: CWE-1021 - [WordPress Jetpack plugin < 12.7 - Auth. Iframe Injection vulnerability](https://agentprime.io/advisories/CVE-2023-47774.md) `CVE-2023-47774` · CVE record: Automattic Jetpack · CVSS 5.4 Medium · Not analysed yet · Published 24 Apr 2024 · Tags: CWE-1021 - [Welotec: Clickjacking Vulnerability in WebUI](https://agentprime.io/advisories/CVE-2024-3911.md) `CVE-2024-3911` · CVE record: Welotec SMART EMS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 23 Apr 2024 · Tags: CWE-1021 - [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-29981.md) `CVE-2024-29981` · CVE record: Microsoft Microsoft Edge (Chromium-based) and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-1021 - [Clickjacking in Mozilla Firefox](https://agentprime.io/advisories/CVE-2024-2613.md) `CVE-2024-2613` · CVE record: Mozilla Firefox · CVSS 7.5 High · Not analysed yet · Published 19 Mar 2024 · Tags: CWE-1021 - [Clickjacking in your_spotify](https://agentprime.io/advisories/CVE-2024-28196.md) `CVE-2024-28196` · CVE record: Yooooomi your_spotify · CVSS 6.5 Medium · Not analysed yet · Published 13 Mar 2024 · Tags: CWE-1021 - [Microsoft Edge for Android Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-26167.md) `CVE-2024-26167` · CVE record: Microsoft Microsoft Edge for Android · CVSS 4.3 Medium · Not analysed yet · Published 7 Mar 2024 · Tags: CWE-1021 - [Clickjacking vulnerability in Sunny Webbox](https://agentprime.io/advisories/CVE-2024-1890.md) `CVE-2024-1890` · CVE record: SMA Sunny Webbox · CVSS 6.4 Medium · Not analysed yet · Published 26 Feb 2024 · Tags: CWE-1021 - [Clickjacking in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2024-1550.md) `CVE-2024-1550` · CVE record: Mozilla Firefox and 2 more · CVSS 6.1 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: CWE-1021 - [HCL Sametime is impacted by clickjacking](https://agentprime.io/advisories/CVE-2023-45698.md) `CVE-2023-45698` · CVE record: HCL Software HCL Sametime · CVSS 4.8 Medium · Not analysed yet · Published 10 Feb 2024 · Tags: CWE-1021 - [Cross-Frame Scripting vulnerability has been found on Plone CMS](https://agentprime.io/advisories/GHSA-5xfx-55x4-j223.md) `GHSA-5xfx-55x4-j223`, `CVE-2024-0669`, `PYSEC-2026-1797` · PyPI `plone`: affected `<6.0.7`, fixed in `6.0.7` · CVSS 6.3 Medium · Not analysed yet · Published 18 Jan 2024 · Tags: CWE-1021 - [Clickjacking in Apple macOS and others](https://agentprime.io/advisories/CVE-2022-32919.md) `CVE-2022-32919` · CVE record: Apple macOS and 1 more · CVSS 4.7 Medium · Not analysed yet · Published 10 Jan 2024 · Tags: CWE-1021 - [OnCell G3150A-LTE Series: Clickjacking Vulnerability](https://agentprime.io/advisories/CVE-2023-6093.md) `CVE-2023-6093` · CVE record: Moxa OnCell G3150A-LTE Series · CVSS 5.3 Medium · Not analysed yet · Published 31 Dec 2023 · Tags: CWE-1021 - [Stackrox: missing http security headers allows for clickjacking in web ui](https://agentprime.io/advisories/CVE-2023-4958.md) `CVE-2023-4958` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-1021 - [Improper restriction of rendered UI layers or frames could lead to clickjacking attack](https://agentprime.io/advisories/CVE-2023-2265.md) `CVE-2023-2265` · CVE record: Schweitzer Engineering Laboratories SEL-411L · CVSS 4.3 Medium · Not analysed yet · Published 30 Nov 2023 · Tags: CWE-1021 - [Quay: clickjacking on config-editor page severity](https://agentprime.io/advisories/CVE-2023-4956.md) `CVE-2023-4956` · CVE record: Red Hat Red Hat Quay 3 · CVSS 6.5 Medium · Not analysed yet · Published 7 Nov 2023 · Tags: CWE-1021 - [Clickjacking vulnerability in SAP Enable Now](https://agentprime.io/advisories/CVE-2023-36920.md) `CVE-2023-36920` · CVE record: SAP SE SAP Enable Now · CVSS 6.1 Medium · Not analysed yet · Published 30 Oct 2023 · Tags: CWE-1021 - [Lack of XFO header allows clickjacking in Home Assistant Core](https://agentprime.io/advisories/CVE-2023-41897.md) `CVE-2023-41897` · CVE record: home-assistant core · CVSS 8.8 High · Not analysed yet · Published 19 Oct 2023 · Tags: CWE-1021 - [Clickjacking in SICK AG APU0200](https://agentprime.io/advisories/CVE-2023-5103.md) `CVE-2023-5103` · CVE record: SICK AG APU0200 · CVSS 4.3 Medium · Not analysed yet · Published 9 Oct 2023 · Tags: CWE-1021 - [Economizzer vulnerable to Clickjacking](https://agentprime.io/advisories/GHSA-gc95-5mmp-mp6j.md) `GHSA-gc95-5mmp-mp6j`, `CVE-2023-38873`, `PKSA-4cn2-qjq4-n6jb` · Packagist `gugoan/economizzer`: affected `<=0.9-beta1`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 28 Sept 2023 · Tags: CWE-1021 - [Spoofing User's Activity Loads in WARP Mobile Client (Android)](https://agentprime.io/advisories/CVE-2023-0654.md) `CVE-2023-0654` · CVE record: Cloudflare WARP Client · CVSS 3.9 Low · Not analysed yet · Published 29 Aug 2023 · Tags: CWE-1021 - [ioLogik 4000 Series: Session Headers Not Implemented](https://agentprime.io/advisories/CVE-2023-4229.md) `CVE-2023-4229` · CVE record: Moxa ioLogik 4000 Series · CVSS 4.3 Medium · Not analysed yet · Published 24 Aug 2023 · Tags: CWE-1021 - [Telegram v9.6.3 on iOS allows attackers to hide critical information on the User Interface via calling the function SFSafariViewController.](https://agentprime.io/advisories/CVE-2023-34658.md) `CVE-2023-34658` · CVE record · No CVSS score · Not analysed yet · Published 29 Jun 2023 · Tags: CWE-1021 - [KNIME Hub Web Application is vulnerable to clickjacking](https://agentprime.io/advisories/CVE-2023-3140.md) `CVE-2023-3140` · CVE record: KNIME KNIME Business Hub · CVSS 4.3 Medium · Not analysed yet · Published 7 Jun 2023 · Tags: CWE-1021 - [Clickjacking in GitLab](https://agentprime.io/advisories/CVE-2023-2013.md) `CVE-2023-2013` · CVE record: GitLab GitLab · CVSS 2.6 Low · Not analysed yet · Published 7 Jun 2023 · Tags: CWE-1021 - [Clickjacking in Mozilla Firefox](https://agentprime.io/advisories/CVE-2023-28159.md) `CVE-2023-28159` · CVE record: Mozilla Firefox · CVSS 4.3 Medium · Not analysed yet · Published 2 Jun 2023 · Tags: CWE-1021 - [Clickjacking in Mozilla Firefox](https://agentprime.io/advisories/CVE-2023-25748.md) `CVE-2023-25748` · CVE record: Mozilla Firefox · CVSS 4.3 Medium · Not analysed yet · Published 2 Jun 2023 · Tags: CWE-1021 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .