CVE-2016-9168

published 2017-03-23

CVE-2016-9168: A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking.

medium 6.5 CVSS 3.0

AV N AC L PR N UI R S U C N I H A N

A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
novell	edirectory	<= 9.0.1	—

CWE-20