Login Request a demo
Unscored severity · published Aug 17, 2012
CVE-2012-3308
Cross-site scripting (XSS) vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat
–
CVSS
1.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Sametime · Ibm
8.0.2.0; 8.0.2.1; 8.5.0.0; 8.5.1.0; 8.5.1.1; 8.5.2.0; +1 more · source: NVD
Affected product
SA
Sametime
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3308
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3308
Patch
http://www.ibm.com/support/docview.wss?uid=swg21599114
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=swg21607903
www.securitytracker.com
http://www.securitytracker.com/id?1027402
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/77567
More from Sametime
7.8
CVE-2016-2972
IBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user in the local cache of their browser which could be accessed by a local user
6.5
CVE-2016-2965
IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input
6.5
CVE-2016-0356
IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease…
6.5
CVE-2016-0355
IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease…
6.3
CVE-2016-2980
The Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site can inject their own script by exploiting a vulnerability in the way that the…