VULNERABILITY INTELLIGENCE
CVE-2025-64387
EPSS probability0.39%
CISA KEVNot currently listed
Published2025-10-31
Last modified2026-06-17
Description
The web application is vulnerable to a so-called ‘clickjacking’ attack. In this type of attack, the vulnerable page is inserted into a page controlled by the attacker in order to deceive the victim. This deception can range from making the victim click on a button to making them enter their login credentials in a form that, a priori, appears legitimate.
Weakness classification
- 50b5080a-775f-442e-83b5-926b5ca517b6: CWE-1021