could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| IBM | Datacap | unaffected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Vendor Solution
IBM strongly suggests that you address the vulnerabilities now for all the affected products/versions listed above by installing Fix. See the https://www.ibm.com/support/pages/node/7231588 readme for details.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2025-19435 | IBM Datacap 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. |
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7238443 |
|
Tue, 01 Jul 2025 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Ibm datacap Navigator
|
|
| CPEs | cpe:2.3:a:ibm:datacap_navigator:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Ibm datacap Navigator
|
Mon, 30 Jun 2025 14:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Sat, 28 Jun 2025 01:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM Datacap 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. | |
| Title | IBM Datacap clickjacking | |
| First Time appeared |
Ibm
Ibm datacap |
|
| Weaknesses | CWE-1021 | |
| CPEs | cpe:2.3:a:ibm:datacap:9.1.7:*:*:*:*:*:*:* cpe:2.3:a:ibm:datacap:9.1.8:*:*:*:*:*:*:* cpe:2.3:a:ibm:datacap:9.1.9:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm datacap |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2025-08-24T11:39:15.170Z
Reserved: 2025-04-15T21:16:08.835Z
Link: CVE-2025-36027
Vulnrichment
Updated: 2025-06-30T13:45:24.464Z
NVD
Status : Analyzed
Published: 2025-06-28T01:15:25.343
Modified: 2025-07-01T14:19:40.397
Link: CVE-2025-36027
Redhat
No data.
OpenCVE Enrichment
No data.