VULNERABILITY INTELLIGENCE

CVE-2015-0127

CVSS score3.5 LOW
EPSS probability0.66%
CISA KEVNot currently listed
Published2015-06-28
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:N/I:P/A:N

Description

IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 does not properly restrict use of FRAME elements, which allows remote authenticated users to conduct phishing attacks via a crafted web site.

Primary references