CVE-2025-64387
CVE-2025-64387 is a medium-severity vulnerability with a CVSS 4.0 base score of 5.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-1021.
Key facts
- Severity: Medium (CVSS 4.0 base score 5.1)
- EPSS exploit prediction: 0% (27th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2025-37353
- Weakness: CWE-1021
- Published:
- Last modified:
Description
The web application is vulnerable to a so-called ‘clickjacking’ attack. In this type of attack, the vulnerable page is inserted into a page controlled by the attacker in order to deceive the victim. This deception can range from making the victim click on a button to making them enter their login credentials in a form that, a priori, appears legitimate.
Frequently asked questions
- What is CVE-2025-64387?
- The web application is vulnerable to a so-called ‘clickjacking’ attack. In this type of attack, the vulnerable page is inserted into a page controlled by the attacker in order to deceive the victim. This deception can range from making the victim click on a button to making them enter their login credentials in a form that, a priori, appears legitimate.
- How severe is CVE-2025-64387?
- CVE-2025-64387 has a CVSS 4.0 base score of 5.1, rated medium severity.
- Is CVE-2025-64387 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (27th percentile), an estimate of the probability of exploitation in the next 30 days.
- How do I fix CVE-2025-64387?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2025-64387 have an EU (EUVD) identifier?
- Yes. CVE-2025-64387 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-37353.
- When was CVE-2025-64387 published?
- CVE-2025-64387 was published on 2025-10-31 and last updated on 2026-06-17.
References
- https://cds.thalesgroup.com/es/s21sec
- https://circutor.com/productos/iot-industrial-y-automatizacion/conversores-y-pasarelas/product/D80010./
- https://www.hackrtu.com/blog/cg-0day-en-003/
Other CWE-1021 vulnerabilities
- CVE-2021-43048 — Critical (CVSS 9.8): The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability…
- CVE-2021-23274 — Critical (CVSS 9.8): The Config UI component of TIBCO Software Inc.'s TIBCO API Exchange Gateway and TIBCO API Exchange Gateway Distribution…
- CVE-2016-2496 — Critical (CVSS 9.8): The Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows attackers to conduct…
- CVE-2021-21132 — Critical (CVSS 9.6): Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to…
- CVE-2021-21111 — Critical (CVSS 9.6): Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a…
- CVE-2024-10004 — Critical (CVSS 9.1): Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in…