Advisories · Weakness

CWE-1021.

Every Advisory and CVE whose sources give the weakness CWE-1021, newest first.

CVE-2023-25730 CVE record

CVSS 5.4 Medium

Clickjacking in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-1021
Not analysed yet 2 Jun 2023
CVE-2022-43378 CVE record

CVSS 6.5 Medium

Clickjacking in Schneider Electric NetBotz 4 - 355/450/455/550/570
- Schneider Electric NetBotz 4 - 355/450/455/550/570
- CWE-1021
Not analysed yet 18 Apr 2023
CVE-2023-1362 CVE record

CVSS 8.4 High

Improper Restriction of Rendered UI Layers or Frames in unilogies/bumsys
- unilogies/bumsys
- CWE-1021
Not analysed yet 13 Mar 2023
cockpit-hq/cockpit Packagist

CVSS 4.0 Medium

Improper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit
- CWE-1021
<2.3.9 · fixed in 2.3.9

GHSA-gm7m-rqf8-jx4m · CVE-2023-0780 Not analysed yet 11 Feb 2023
CVE-2022-40268 CVE record

CVSS 6.1 Medium

Clickjacking in Mitsubishi Electric Corporation GOT2000 Series GT27 model and others
- Mitsubishi Electric Corporation GOT2000 Series GT27 model
- Mitsubishi Electric Corporation GOT2000 Series GT25 model
- CWE-1021
Not analysed yet 2 Feb 2023
CVE-2022-32517 CVE record

CVSS 6.5 Medium

Clickjacking in Schneider Electric Conext™ ComBox
- Schneider Electric Conext™ ComBox
- CWE-1021
Not analysed yet 30 Jan 2023
CVE-2023-20913 CVE record

CVSS 7.8 High

Clickjacking in Android
- Android
- CWE-1021
Not analysed yet 24 Jan 2023
CVE-2022-20215 CVE record

CVSS 5.5 Medium

Clickjacking in Android
- Android
- CWE-1021
Not analysed yet 24 Jan 2023
CVE-2022-20214 CVE record

CVSS 4.7 Medium

Clickjacking in Android
- Android
- CWE-1021
Not analysed yet 24 Jan 2023
CVE-2022-20213 CVE record

CVSS 5.5 Medium

Clickjacking in Android
- Android
- CWE-1021
Not analysed yet 24 Jan 2023
pyload-ng PyPI

CVSS 3.1 Low

pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames
- CWE-1021
<0.5.0b3.dev33 · fixed in 0.5.0b3.dev33

GHSA-h8r9-467r-vjjf · CVE-2023-0057 Not analysed yet 5 Jan 2023
CVE-2022-45420 CVE record

CVSS 6.5 Medium

Clickjacking in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- CWE-1021
Not analysed yet 22 Dec 2022
CVE-2022-45418 CVE record

CVSS 6.1 Medium

Clickjacking in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- CWE-1021
Not analysed yet 22 Dec 2022
CVE-2022-45417 CVE record

CVSS 4.3 Medium

Clickjacking in Mozilla Firefox
- Mozilla Firefox
- CWE-1021
Not analysed yet 22 Dec 2022
CVE-2022-36319 CVE record

CVSS 7.5 High

Clickjacking in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- CWE-1021
Not analysed yet 22 Dec 2022
CVE-2022-3034 CVE record

CVSS 4.3 Medium

Clickjacking in Mozilla Thunderbird
- Mozilla Thunderbird
- CWE-1021
Not analysed yet 22 Dec 2022
CVE-2022-29914 CVE record

CVSS 6.5 Medium

Clickjacking in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- CWE-1021
Not analysed yet 22 Dec 2022
CVE-2022-29911 CVE record

CVSS 6.1 Medium

Clickjacking in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- CWE-1021
Not analysed yet 22 Dec 2022
CVE-2022-28286 CVE record

CVSS 5.4 Medium

Clickjacking in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- CWE-1021
Not analysed yet 22 Dec 2022
CVE-2022-20553 CVE record

CVSS 6.5 Medium

Clickjacking in Android
- Android
- CWE-1021
Not analysed yet 16 Dec 2022
CVE-2022-46695 CVE record

CVSS 6.5 Medium

Clickjacking in Apple tvOS and others
- Apple tvOS
- Apple watchOS
- CWE-1021
Not analysed yet 15 Dec 2022
CVE-2022-46061 CVE record

CVSS 6.1 Medium

AeroCMS v0.0.1 is vulnerable to ClickJacking.
- CWE-1021
Not analysed yet 13 Dec 2022
CVE-2022-20501 CVE record

CVSS 7.3 High

Clickjacking in Android
- Android
- CWE-1021
Not analysed yet 13 Dec 2022
CVE-2022-20442 CVE record

CVSS 7.3 High

Clickjacking in Android
- Android
- CWE-1021
Not analysed yet 13 Dec 2022
CVE-2022-3260 CVE record

CVSS 4.8 Medium

Clickjacking in Openshift
- Openshift
- CWE-1021
Not analysed yet 8 Dec 2022
CVE-2022-34318 CVE record

CVSS 5.4 Medium

IBM CICS TX clickjacking
- IBM CICS TX
- CWE-1021
Not analysed yet 14 Nov 2022
CVE-2022-42799 CVE record

CVSS 6.1 Medium

Clickjacking in Apple macOS and others
- Apple macOS
- Apple tvOS
- CWE-1021
Not analysed yet 1 Nov 2022
github.com/hashicorp/boundary Go

CVSS 6.1 Medium

Hashicorp Boundary vulnerable to clickjacking
- CWE-1021
<=0.11.0 · no fixed version yet

GHSA-xqv2-3vvq-qg6r · CVE-2022-36182 Not analysed yet 27 Oct 2022
rdiffweb PyPI

CVSS 10.0 CriticalCritical · CVSS 9+

rdiffweb vulnerable to Improper Restriction of Rendered UI Layers or Frames
- CWE-1021
<2.4.1 · fixed in 2.4.1

GHSA-m379-x4xc-38x9 · CVE-2022-3167 Not analysed yet 9 Sept 2022
CVE-2022-2965 CVE record

CVSS 6.4 Medium

Improper Restriction of Rendered UI Layers or Frames in notrinos/notrinoserp
- notrinos/notrinoserp
- CWE-1021
Not analysed yet 23 Aug 2022
CVE-2022-20820 CVE record

CVSS 5.4 Medium

Cisco Webex Meetings Web Interface Vulnerabilities
- Cisco Webex Meetings
- CWE-1021
Not analysed yet 10 Aug 2022
CVE-2022-20852 CVE record

CVSS 5.4 Medium

Cisco Webex Meetings Web Interface Vulnerabilities
- Cisco Webex Meetings
- CWE-1021
Not analysed yet 10 Aug 2022
CVE-2022-2734 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Improper Restriction of Rendered UI Layers or Frames in openemr/openemr
- openemr/openemr
- CWE-1021
Not analysed yet 9 Aug 2022
CVE-2022-33727 CVE record

CVSS 4.8 Medium

Clickjacking in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-1021
Not analysed yet 5 Aug 2022
CVE-2022-33723 CVE record

CVSS 4.8 Medium

Clickjacking in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-1021
Not analysed yet 5 Aug 2022
CVE-2022-2179 CVE record

CVSS 6.5 Medium

ICSA-22-188-01 Rockwell Automation MicroLogix Improper Restriction of Rendered UI Layers or Frames
- Rockwell Automation MicroLogix 1400
- Rockwell Automation MicroLogix 1100
- CWE-1021
Not analysed yet 20 Jul 2022
org.apache.druid:druid Maven

CVSS 4.3 Medium

Apache Druid before 0.23.0 vulnerable to clickjacking
- CWE-1021
<0.23.0 · fixed in 0.23.0

GHSA-pgq7-jcj5-xx6h · CVE-2022-28889 Not analysed yet 8 Jul 2022
CVE-2017-20041 CVE record

CVSS 5.4 Medium

Ucweb UC Browser HTML URL improper restriction of rendered ui layers
- Ucweb UC Browser
- CWE-1021
Not analysed yet 13 Jun 2022
ec-cube/ec-cube Packagist

CVSS 6.1 Medium

EC-CUBE Improper Restriction of Rendered UI Layers or Frames
- CWE-1021
>=3.0.0, <=3.0.18 · no fixed version yet

GHSA-rwh8-h525-4jvj · CVE-2020-5679 Not analysed yet 24 May 2022
org.jenkins-ci.main:jenkins-core Maven

CVSS 3.1 Low

Jenkins REST APIs vulnerable to clickjacking
- CWE-1021
<2.204.2 || >=2.205, <2.219 · fixed in 2.204.2, 2.219

GHSA-7xp8-7wqx-5hqx · CVE-2020-2105 Not analysed yet 24 May 2022
CVE-2022-1803 CVE record

CVSS 8.4 High

Improper Restriction of Rendered UI Layers or Frames in polonel/trudesk
- polonel/trudesk
- CWE-1021
Not analysed yet 20 May 2022
CVE-2022-28649 CVE record

CVSS 4.6 Medium

Clickjacking in JetBrains YouTrack
- JetBrains YouTrack
- CWE-1021
Not analysed yet 5 Apr 2022
sylius/sylius Packagist

CVSS 6.1 Medium

Improper Restriction of Rendered UI Layers or Frames in Sylius
- CWE-1021
<1.9.10 || >=1.10.0, <1.10.11 || >=1.11.0, <1.11.2 · fixed in 1.9.10, 1.10.11, 1.11.2

GHSA-4jp3-q2qm-9fmw · CVE-2022-24733 Not analysed yet 14 Mar 2022
swagger-ui-dist npm

CVSS 6.1 Medium

Spoofing attack in swagger-ui-dist
- CWE-1021
<4.1.3 · fixed in 4.1.3

GHSA-6c9x-mj3g-h47x · CVE-2021-46708 Not analysed yet 12 Mar 2022
CVE-2021-3660 CVE record

Clickjacking in cockpit
- cockpit
- CWE-1021
Not analysed yet 7 Mar 2022
CVE-2022-22807 CVE record

Clickjacking in EcoStruxure EV Charging Expert (formerly known as EVlink Load Management…
- EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13)
- CWE-1021
Not analysed yet 9 Feb 2022
CVE-2022-22552 CVE record

CVSS 6.9 Medium

Clickjacking in Dell AppSync
- Dell AppSync
- CWE-1021
Not analysed yet 21 Jan 2022
CVE-2021-35237 CVE record

CVSS 5.0 Medium

Clickjacking Vulnerability
- SolarWinds Kiwi Syslog Server
- CWE-1021
Not analysed yet 29 Oct 2021
CVE-2021-38472 CVE record

CVSS 4.7 Medium

InHand Networks IR615 Router
- InHand Networks IR615 Router
- CWE-1021
Not analysed yet 19 Oct 2021
CVE-2021-3799 CVE record

CVSS 5.4 Medium

Improper Restriction of Rendered UI Layers or Frames in getgrav/grav-plugin-admin
- getgrav/grav-plugin-admin
- CWE-1021
Not analysed yet 27 Sept 2021
CVE-2018-19957 CVE record

Insufficient HTTP Security Headers in QTS, QuTS hero, and QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- CWE-1021
Not analysed yet 10 Sept 2021
yourls/yourls Packagist

CVSS 6.5 Medium

Improper Restriction of Rendered UI Layers or Frames in yourls
- Cross-site request forgery (CSRF)
- CWE-1021
<=1.8.1 · no fixed version yet

GHSA-r6g8-jmj9-g945 · CVE-2021-3734 Not analysed yet 30 Aug 2021
CVE-2021-3731 CVE record

CVSS 5.9 Medium

Improper Restriction of Rendered UI Layers or Frames in ledgersmb/ledgersmb
- ledgersmb/ledgersmb
- CWE-1021
Not analysed yet 23 Aug 2021
CVE-2021-27467 CVE record

Clickjacking in Emerson Rosemount X-STREAM Gas Analyzer
- Emerson Rosemount X-STREAM Gas Analyzer
- CWE-1021
Not analysed yet 20 May 2021
CVE-2020-28218 CVE record

Clickjacking in Easergy T300 (firmware 2.7 and older)
- Easergy T300 (firmware 2.7 and older)
- CWE-1021
Not analysed yet 11 Dec 2020
CVE-2020-15793 CVE record

Clickjacking in Siemens Desigo Insight
- Siemens Desigo Insight
- CWE-1021
Not analysed yet 15 Oct 2020
CVE-2020-13174 CVE record

Clickjacking in - Management Console
- - Management Console
- CWE-1021
Not analysed yet 11 Aug 2020
org.keycloak:keycloak-core Maven

CVSS 4.8 Medium

Improper Restriction of Rendered UI Layers or Frames in Keycloak
- CWE-358
- CWE-1021
<=9.0.3 · no fixed version yet

GHSA-3gg7-9q2x-79fc · CVE-2020-1728 Not analysed yet 15 Apr 2020
CVE-2019-7393 CVE record

Clickjacking in CA Technologies, A Broadcom Company CA Strong Authentication and others
- CA Technologies, A Broadcom Company CA Strong Authentication
- CA Technologies, A Broadcom Company CA Risk Authentication
- CWE-1021
Not analysed yet 28 May 2019
CVE-2017-16775 CVE record

CVSS 7.1 High

Clickjacking in Synology SSO Server
- Synology SSO Server
- CWE-1021
Not analysed yet 1 Apr 2019