IBM/ECMClient/configure/explodedformat/navigator/header.jsp in IBM Content Navigator 2.0.0, 2.0.1 before 2.0.1.2-ICN-FP002, and 2.0.2 before 2.0.2.1-ICN-FP001 allows remote attackers to conduct clickjacking attacks via vectors involving FRAME elements.
| Software | From | Fixed in |
|---|---|---|
| ibm / content_navigator | 2.0.0 | 2.0.0.x |
| ibm / content_navigator | 2.0.1 | 2.0.1.x |
| ibm / content_navigator | 2.0.2 | 2.0.2.x |