Advisories · Weakness

CWE-1022.

Every Advisory and CVE whose sources give the weakness CWE-1022, newest first.

CVE-2025-27902 CVE record

CVSS 6.1 Medium

IBM Db2 Recovery Expert for Linux, Unix and Windows Information Disclosure
- IBM DB2 Recovery Expert for Linux, UNIX and Windows
- CWE-1022
Not analysed yet 12 Oct 2026
CVE-2026-71555 CVE record

CVSS 4.1 Medium

PILOS: Reverse tabnabbing in room description
- THM-Health PILOS
- CWE-1022
Not analysed yet 6 Aug 2026
jupyterlab PyPI

CVSS 2.1 Low

JupyterLab LaTeX typesetter links did not enforce `noopener` attribute
- CWE-1022
<4.4.8 · fixed in 4.4.8

GHSA-vvfj-2jqx-52jm · CVE-2025-59842 Not analysed yet 26 Sept 2025
CVE-2025-42941 CVE record

CVSS 3.5 Low

Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad)
- SAP_SE SAP Fiori (Launchpad)
- CWE-1022
Not analysed yet 12 Aug 2025
hfs npm

CVSS 4.0, no score published

HFS user adding a "web link" in HFS is vulnerable to "target=_blank" exploit
- CWE-1022
<0.57.10 · fixed in 0.57.10

GHSA-xcxh-6cv4-q8p8 Not analysed yet 12 Aug 2025
CVE-2025-33014 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway link injection
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- CWE-1022
Not analysed yet 18 Jul 2025
CVE-2024-39727 CVE record

CVSS 6.1 Medium

IBM Engineering Lifecycle Optimization - Engineering Insights tabnabbing
- IBM Engineering Insights
- CWE-1022
Not analysed yet 25 Dec 2024
CVE-2018-25089 CVE record

CVSS 3.5 Low

glb Meetup Tag Extension Link Attribute reverse tabnabbing
- glb Meetup Tag Extension
- CWE-1022
Not analysed yet 28 Aug 2023
CVE-2022-4927 CVE record

CVSS 5.5 Medium

ualbertalib NEOSDiscovery _refworks.html.erb reverse tabnabbing
- ualbertalib NEOSDiscovery
- CWE-1022
Not analysed yet 5 Mar 2023
twitter-fetcher-js npm

CVSS 4.2 Medium

Twitter-Post-Fetcher vulnerable to Use of Web Link to Untrusted Target with window.opener Access
- CWE-1022
<18.0.0 · fixed in 18.0.0

GHSA-m688-cx2p-rgq9 · CVE-2018-25058 Not analysed yet 29 Dec 2022
text_helpers RubyGems

CVSS 6.3 Medium

text_helpers uses web link to untrusted target with window.opener access
- Privilege escalation
- CWE-1022
>=1.1.0, <1.2.0 · fixed in 1.2.0

GHSA-74hc-57m5-83ch · CVE-2020-36624 Not analysed yet 22 Dec 2022
CVE-2022-2600 CVE record

Auto-hyperlink URLs <= 5.4.1 - Tab Nabbing
- Auto-hyperlink URLs
- CWE-1022
Not analysed yet 22 Aug 2022
CVE-2022-1583 CVE record

External Links in New Window / New Tab < 1.43 - Tabnabbing
- External Links in New Window / New Tab
- CWE-1022
Not analysed yet 30 May 2022
CVE-2021-33697 CVE record

CVSS 4.7 Medium

SAP SE SAP BusinessObjects Business Intelligence Platform…: Under certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5)…
- SAP SE SAP BusinessObjects Business Intelligence Platform (SAPUI5)
- CWE-1022
Not analysed yet 15 Sept 2021
CVE-2021-39112 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
- Atlassian Jira Data Center
- CWE-1022
Not analysed yet 25 Aug 2021
showdown npm

CVSS 3.1 Low

Reverse Tabnabbing in showdown
- CWE-1022
<1.9.1 · fixed in 1.9.1

GHSA-h6mq-3cj6-h738 Not analysed yet 3 Sept 2020
quill npm

CVSS 6.5 Medium

Reverse Tabnabbing in quill
- CWE-1022
<1.3.7 · fixed in 1.3.7

GHSA-588m-9qg5-35pq Not analysed yet 3 Sept 2020
swagger-ui npm

CVSS 4.3 Medium

Reverse Tabnapping in swagger-ui
- CWE-1022
<3.18.0 · fixed in 3.18.0

GHSA-x9p2-fxq6-2m5f Not analysed yet 20 Jun 2019