CVE-2014-4778

MEDIUM · CVSS 4.3 EPSS 0.98%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-05-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2014-4778

Severity

MEDIUM

CVSS

4.3

EPSS

0.98%

Original NVD Description

IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 do not send an X-Frame-Options HTTP header in response to requests for the login page, which allows remote attackers to conduct clickjacking attacks via vectors involving a FRAME element.