IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows remote attackers to conduct clickjacking attacks via a crafted web site.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-0392
http://www.securitytracker.com/id/1036255