IBM / Sametime
46 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2012-3331 | IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048. | MEDIUM | 5.3 | Feb 8, 2018 |
| CVE-2016-2980 | The Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site can inject their own script by exploiting a vulnerability in th… | MEDIUM | 6.3 | Aug 29, 2017 |
| CVE-2016-2978 | IBM Sametime 8.5.2 and 9.0 could store potentially sensitive information from the browser cache locally that could be available to a local user. IBM X-Force ID… | LOW | 3.3 | Aug 29, 2017 |
| CVE-2016-2976 | IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive information by viewing the meeting report histor… | MEDIUM | 4.3 | Aug 29, 2017 |
| CVE-2016-2975 | IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alterin… | MEDIUM | 5.4 | Aug 29, 2017 |
| CVE-2016-2974 | IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime envir… | LOW | 3.3 | Aug 29, 2017 |
| CVE-2016-2967 | IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Sametime away messa… | MEDIUM | 5.4 | Aug 29, 2017 |
| CVE-2016-2966 | IBM Sametime 8.5.1 and 9.0 could allow an authenticated user to enumerate meeting rooms by guessing the meeting room id. IBM X-Force ID: 113847. | MEDIUM | 4.3 | Aug 29, 2017 |
| CVE-2016-2964 | IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may reveal details about the application. IBM… | MEDIUM | 5.3 | Aug 29, 2017 |
| CVE-2016-0358 | IBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat ID numbers and join meetings that he was not invited to. IBM… | MEDIUM | 4.3 | Aug 29, 2017 |
| CVE-2016-2979 | IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… | MEDIUM | 5.4 | Aug 29, 2017 |
| CVE-2016-2977 | IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands in the meeting. IBM X-Force ID: 113937. | MEDIUM | 4.3 | Aug 29, 2017 |
| CVE-2016-2973 | IBM Sametime Media Services 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… | MEDIUM | 5.4 | Aug 29, 2017 |
| CVE-2016-2972 | IBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user in the local cache of their browser which could be accessed by… | HIGH | 7.8 | Aug 29, 2017 |
| CVE-2016-2971 | IBM Sametime Media Services 8.5.2 and 9.0 can disclose sensitive information in stack trace error logs that could aid an attacker in future attacks. IBM X-Forc… | MEDIUM | 5.3 | Aug 29, 2017 |
| CVE-2016-2969 | IBM Sametime Meeting Server 8.5.2 and 9.0 may send replies that contain emails of people that should not be in these messages. IBM X-Force ID: 113850. | MEDIUM | 4.3 | Aug 29, 2017 |
| CVE-2016-2965 | IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading a us… | MEDIUM | 6.5 | Aug 29, 2017 |
| CVE-2016-2959 | IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting room manager to remove the primary managers privileges. IBM X-Force ID: 113804. | MEDIUM | 4.3 | Aug 29, 2017 |
| CVE-2016-10503 | IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of Sametime meeting to lower any or all hands in an e-meeting, thus spo… | MEDIUM | 4.3 | Aug 29, 2017 |
| CVE-2016-0356 | IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sh… | MEDIUM | 6.5 | Aug 29, 2017 |
| CVE-2016-0355 | IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sh… | MEDIUM | 6.5 | Aug 29, 2017 |
| CVE-2016-0354 | IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user to upload a malicious file to a Sametime meeting room, that could be dow… | MEDIUM | 5.5 | Aug 29, 2017 |
| CVE-2016-2970 | IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attack… | MEDIUM | 4.3 | Aug 28, 2017 |
| CVE-2014-4748 | Cross-site scripting (XSS) vulnerability in the Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows remote attackers to inject arbitrary web scri… | MEDIUM | 4.3 | Jul 26, 2014 |
| CVE-2014-4747 | The Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows physically proximate attackers to discover a meeting password hash by leveraging access t… | LOW | 2.1 | Jul 26, 2014 |
Showing 1 to 25 of 46 CVEs