What’s Vulnerable › Vulnerabilities

CVE-2024-55896: IBM PowerHA SystemMirror for i clickjacking

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-01-03 · updated 2026-06-17
• Weakness: CWE-451

Description

IBM PowerHA SystemMirror for i 7.4 and 7.5 contains improper restrictions when rendering content via iFrames.  This vulnerability could allow an attacker to gain improper access and perform unauthorized actions on the system.

Affected products

• IBM i: 7.4, 7.5

References

• https://www.ibm.com/support/pages/node/7180036

Get alerted when CVE-2024-55896 or the next vulnerability affects your stack