ClickJacking finding on Openfire 4.1.5

[akrherz]

Openfire web server potentially vulnerable to clickjacking

OF-997 would indicate these were fixed for 4.1.0, are you able to test a 4.2.0 build with your scan?