As a result of our last scan we received notification of the Web Application Potentially Vulnerable to Clickjacking within our OpManager server.
The Solution: Return the X-Frame-Options or Content-Security-Policy (with the 'frame-ancestors' directive) HTTP header with the page's response. This prevents the page's content from being rendered by another site when using the frame or iframe HTML tags.
I found the solution for Service Desk but not for OpManager.
Please advise.