CVE-2022-30610

Severity: medium (CVSS 4.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-10 · updated 2026-06-17
Weakness: CWE-269

Description

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to reverse tabnabbing where it could allow a page linked to from within IBM Spectrum Copy Data Management to rewrite it. An administrator could enter a link to a malicious URL that another administrator could then click. Once clicked, that malicious URL could then rewrite the original page with a phishing page. IBM X-Force ID: 227363.

Affected products

IBM Spectrum Copy Data Management: from 2.2.0.0 through 2.2.15.0

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/227363
https://www.ibm.com/support/pages/node/6593721
https://exchange.xforce.ibmcloud.com/vulnerabilities/227363
https://www.ibm.com/support/pages/node/6593721

Get alerted when CVE-2022-30610 or the next vulnerability affects your stack