SA
Product
Sametime
17
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 8Low 4
Watch
Add Sametime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-50349 | 8.8 | Feb 9 | Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability Affected: before 12.0.2 |
| CVE-2021-27770 | 8.8 | May 12 | The vulnerability was discovered within the “FaviconService” Affected: 11.6 |
| CVE-2021-27771 | 7.6 | May 12 | User SID can be modified resulting in an Arbitrary File Upload or deletion of directories causing a Denial of Service Affected: 11.6 |
| CVE-2023-45696 | 7.5 | Feb 10 | Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client Affected: 11.5 before 12.0.2 |
| CVE-2023-45718 | 7.5 | Feb 9 | Sametime is impacted by a failure to invalidate sessions Affected: 11.5 before 12.0.2 |
| CVE-2022-42446 | 6.5 | Dec 12 | Starting with Sametime 12, anonymous users are enabled by default Affected: 12.0; 12.0 |
| CVE-2021-27772 | 6.5 | May 12 | Users are able to read group conversations without actively taking part in them Affected: 11.6 |
| CVE-2023-50355 | 5.3 | Oct 23 | HCL Sametime is impacted by generation of error messages containing sensitive information Affected: before 12.0.2; 12.0.2 |
| CVE-2024-30122 | 5.3 | Oct 23 | HCL Sametime is impacted by misconfigured security related HTTP headers Affected: before 12.0.2; 12.0.2 |
| CVE-2021-27769 | 5.3 | May 12 | Information leakage occurs when a website reveals information that could aid an attacker to further exploit the system Affected: 11.6 |
| CVE-2021-27773 | 4.3 | May 12 | This vulnerability allows users to execute a clickjacking attack in the meeting's chat Affected: 11.6 |
| CVE-2023-45716 | 4.1 | Feb 9 | Sametime is impacted by sensitive information passed in URL Affected: before 12.0.2 |
| CVE-2024-30124 | 4.0 | Oct 23 | HCL Sametime is impacted by insecure services Affected: before 12.0.2; 12.0.2 |
| CVE-2023-37540 | 3.9 | Feb 23 | Sametime Connect desktop chat client includes, but does not use or require, the use of an Eclipse feature called Secure Storage Affected: 11.5 before 12.0.2 |
| CVE-2026-21791 | 3.3 | Mar 10 | HCL Sametime for Android is affected by sensitive information disclosure Affected: before 12.0.22 |
| CVE-2026-21786 | 3.3 | Mar 5 | HCL Sametime for iOS is affected by sensitive information disclosure Affected: before 12.0.26 |
| CVE-2025-31966 | 2.7 | Mar 17 | Boolean-Based SQL Injection in Multiple Unica Components Affected: before 12.0.3 |
Showing 17