Vulnerability Description
The web application is vulnerable to a so-called ‘clickjacking’ attack. In this type of attack, the vulnerable page is inserted into a page controlled by the attacker in order to deceive the victim. This deception can range from making the victim click on a button to making them enter their login credentials in a form that, a priori, appears legitimate.
Related Weaknesses (CWE)
References
- https://cds.thalesgroup.com/es/s21sec
- https://circutor.com/productos/iot-industrial-y-automatizacion/conversores-y-pas
- https://www.hackrtu.com/blog/cg-0day-en-003/
FAQ
What is CVE-2025-64387?
CVE-2025-64387 is a documented vulnerability. The web application is vulnerable to a so-called ‘clickjacking’ attack. In this type of attack, the vulnerable page is inserted into a page controlled by the attacker in order to deceive the victim. T...
How severe is CVE-2025-64387?
CVSS scoring is not yet available for CVE-2025-64387. Check NVD for updates.
Is there a patch for CVE-2025-64387?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.