CVE-2016-9168

CVSS 6.5 - MEDIUM
Description

A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking.

Affected Products
1
Vendor Product Version
novell edirectory All versions
Weakness Types
CWE-20
CVE Information
CVE ID:
CVE-2016-9168
Published:
2017-03-23
Modified:
2026-05-13
CVSS Score:
6.5
Severity:
MEDIUM
Vector:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Affected Vendors
novell
Quick Actions
CVSS Severity Scale
0.0 - 3.9 LOW
4.0 - 6.9 MEDIUM
7.0 - 8.9 HIGH
9.0 - 10.0 CRITICAL