The following vulnerability may impact UIM 20.4
Clickjacking: X-Frame-Options header missing --- CWE-693
Release: UIM 20.4*/23.4*
CWE-693
This will be fixed in 23.4 cu5 which will be released tentatively around July 2025.