SA
Product
Sametime
17
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 8Low 4
Watch
Add Sametime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-50349 | 8.8 | Feb 9 | Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability Affected: before 12.0.2 |
| CVE-2021-27770 | 8.8 | May 12 | The vulnerability was discovered within the “FaviconService” Affected: 11.6 |
| CVE-2021-27771 | 7.6 | May 12 | User SID can be modified resulting in an Arbitrary File Upload or deletion of directories causing a Denial of Service Affected: 11.6 |
| CVE-2023-45696 | 7.5 | Feb 10 | Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client Affected: 11.5 before 12.0.2 |
| CVE-2023-45718 | 7.5 | Feb 9 | Sametime is impacted by a failure to invalidate sessions Affected: 11.5 before 12.0.2 |
Showing 5
