The X-Frame-Options parameter, when set to DENY, is not functioning as described in the Broadcom technical documentation:
X-frame-options-parameter
Identity Manager v14.5
This is a defect and is recorded under DE614811.
The Engineering provided a fix (HF-DE614811.zip)
Please open a support case to receive this fix for your environment.