CVE-2020-4195

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 2018.4.1.0 through 2018.4.1.10

Description The issue allows a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this to hijack the victim's click actions and possibly launch further attacks against the victim.

Recommendations For versions 2018.4.1.0 through 2018.4.1.10, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to potentially malicious Web sites to minimize the risk of exploitation.