Well, Cognex tech support almost got it right, but unfortunately it's in the Cognex web server that CORS has to be enabled.
You might be able to set up a local reverse proxy or something like that, so that you point the Perspective iframe to the proxy instead.
Discussed in theory here: Cognex Web HMI with iframe and probably in other topics about iframe embedding issues.