CVE-2019-4109

CVE-2019-4109 describes a clickjacking vulnerability in the IBM WebSphere eXtreme Scale 8.6 Admin Console. A remote attacker could exploit this by tricking a victim into visiting a malicious website, thereby hijacking their click actions and potentially leading to further attacks. The vulnerability has a CVSS score of 6.1 (Medium), indicating it can be exploited remotely with low attack complexity, requiring user interaction, and potentially impacting confidentiality and integrity. Its EPSS and FAUCET scores suggest a relatively low likelihood of exploitation in the wild. Currently, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), nor is it listed on the CISA KEV catalog. There is also no evidence of active exploitation or significant community discussion or media coverage surrounding this CVE.