SA
Product
Sametime
46
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 20Low 2
Watch
Add Sametime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2972 | 7.8 | Aug 29 | IBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user in the local cache of their browser which could be accessed by a local user Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2965 | 6.5 | Aug 29 | IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-0356 | 6.5 | Aug 29 | IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease… Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-0355 | 6.5 | Aug 29 | IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease… Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2980 | 6.3 | Aug 29 | The Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site can inject their own script by exploiting a vulnerability in the way that the… Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-0354 | 5.5 | Aug 29 | IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user to upload a malicious file to a Sametime meeting room, that could be downloaded by… Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2975 | 5.4 | Aug 29 | IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2967 | 5.4 | Aug 29 | IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2979 | 5.4 | Aug 29 | IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2973 | 5.4 | Aug 29 | IBM Sametime Media Services 8.5.2 and 9.0 is vulnerable to cross-site scripting Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2012-3331 | 5.3 | Feb 8 | IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF Affected: 6.5.1.0; 7.0.0.0; 7.5.0.0; 7.5.1.0; 7.5.1.1; 7.5.1.2; +9 more |
| CVE-2016-2964 | 5.3 | Aug 29 | IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may reveal details about the application Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2971 | 5.3 | Aug 29 | IBM Sametime Media Services 8.5.2 and 9.0 can disclose sensitive information in stack trace error logs that could aid an attacker in future attacks Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2976 | 4.3 | Aug 29 | IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive information by viewing the meeting report history Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2966 | 4.3 | Aug 29 | IBM Sametime 8.5.1 and 9.0 could allow an authenticated user to enumerate meeting rooms by guessing the meeting room id Affected: 8.5.1.0; 8.5.1.1; 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; +1 more |
| CVE-2016-0358 | 4.3 | Aug 29 | IBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat ID numbers and join meetings that he was not invited to Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2977 | 4.3 | Aug 29 | IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands in the meeting Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2969 | 4.3 | Aug 29 | IBM Sametime Meeting Server 8.5.2 and 9.0 may send replies that contain emails of people that should not be in these messages Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2959 | 4.3 | Aug 29 | IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting room manager to remove the primary managers privileges Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-10503 | 4.3 | Aug 29 | IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of Sametime meeting to lower any or all hands in an e-meeting, thus spoofing results of… Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2970 | 4.3 | Aug 29 | IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2978 | 3.3 | Aug 29 | IBM Sametime 8.5.2 and 9.0 could store potentially sensitive information from the browser cache locally that could be available to a local user Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2974 | 3.3 | Aug 29 | IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as… Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2014-4748 | – | Jul 26 | Cross-site scripting (XSS) vulnerability in the Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via a… Affected: 8.0.0.0; 8.0.1.0; 8.0.1.1; 8.0.2.0; 8.0.2.1; 8.5.0.0; +4 more |
| CVE-2014-4747 | – | Jul 26 | The Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows physically proximate attackers to discover a meeting password hash by leveraging access to an unattended… Affected: 8.0.0.0; 8.0.1.0; 8.0.1.1; 8.0.2.0; 8.0.2.1; 8.5.0.0; +4 more |
| CVE-2014-3867 | – | May 26 | The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it… Affected: 8.0.0.0; 8.0.1.0; 8.0.1.1; 8.0.2.0; 8.0.2.1; 8.5.0.0; +6 more |
| CVE-2014-3014 | – | May 26 | Cross-site scripting (XSS) vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote authenticated users to inject arbitrary… Affected: 8.0.0.0; 8.0.1.0; 8.0.1.1; 8.0.2.0; 8.0.2.1; 8.5.0.0; +6 more |
| CVE-2014-0906 | – | May 26 | The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not check whether a session cookie is current, which allows remote attackers to conduct… Affected: 8.0.0.0; 8.0.1.0; 8.0.1.1; 8.0.2.0; 8.0.2.1; 8.5.0.0; +5 more |
| CVE-2013-3984 | – | May 26 | The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not set the secure flag for an unspecified cookie in an https session, which makes it easier… Affected: 8.0.0.0; 8.0.1.0; 8.0.1.1; 8.0.2.0; 8.0.2.1; 8.5.0.0; +5 more |
| CVE-2013-3982 | – | May 26 | The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to obtain unspecified installation information and technical data via a… Affected: 8.0.0.0; 8.0.1.0; 8.0.1.1; 8.0.2.0; 8.0.2.1; 8.5.0.0; +6 more |
| CVE-2013-3981 | – | May 26 | The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to download avatar photos of arbitrary users via unspecified vectors Affected: 8.0.0.0; 8.0.1.0; 8.0.1.1; 8.0.2.0; 8.0.2.1; 8.5.0.0; +6 more |
| CVE-2013-3980 | – | May 26 | The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to cause a denial of service (room unusability) by generating a large number… Affected: 8.0.0.0; 8.0.1.0; 8.0.1.1; 8.0.2.0; 8.0.2.1; 8.5.0.0; +6 more |
| CVE-2013-3977 | – | May 26 | The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to determine which meeting rooms are owned by a user by leveraging knowledge… Affected: 8.0.0.0; 8.0.1.0; 8.0.1.1; 8.0.2.0; 8.0.2.1; 8.5.0.0; +6 more |
| CVE-2013-3975 | – | May 26 | Unspecified vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to discover user names, full names, and e-mail… Affected: 8.0.0.0; 8.0.1.0; 8.0.1.1; 8.0.2.0; 8.0.2.1; 8.5.0.0; +6 more |
| CVE-2013-3046 | – | May 26 | The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not send the HSTS Strict-Transport-Security header, which makes it easier for man-in-the-middle… Affected: 8.0.0.0; 8.0.1.0; 8.0.1.1; 8.0.2.0; 8.0.2.1; 8.5.0.0; +6 more |
| CVE-2014-0890 | – | Mar 6 | The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, 8.5.2.1, 9.0, and 9.0.0.1, when a certain com.ibm.collaboration.realtime.telephony.*.level setting is used, logs… Affected: 8.5.1.0; 8.5.1.1; 8.5.1.2; 8.5.2.0; 8.5.2.1; 9.0.0.0; +1 more |
| CVE-2013-6743 | – | Feb 14 | Cross-site scripting (XSS) vulnerability in the Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 allows remote authenticated users to inject arbitrary… Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1 |
| CVE-2013-3988 | – | Feb 14 | The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1 |
| CVE-2013-6742 | – | Feb 14 | The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 do not have an off autocomplete attribute for a password field, which makes it easier for remote… Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1 |
| CVE-2013-3983 | – | Feb 14 | The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not validate URLs in Cookie headers before using them in redirects, which has unspecified… Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1 |
| CVE-2013-3978 | – | Feb 14 | The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not send the appropriate HTTP response headers to prevent unwanted caching by a web browser,… Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1 |
| CVE-2013-6727 | – | Jan 31 | The Connect client in IBM Sametime 8.5.2 through 8.5.2.1 and 9.0 before HF1 does not properly restrict unsigned Java plugins, which allows remote attackers to obtain sensitive… Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0 |
| CVE-2013-6733 | – | Dec 17 | Cross-site scripting (XSS) vulnerability in the Web Application in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allows remote attackers to inject arbitrary… Affected: 7.5.1.2; 8.0.0.0; 8.0.1.0; 8.0.1.1; 8.0.2.0; 8.0.2.1; +5 more |
| CVE-2013-0534 | – | Jun 21 | The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive… Affected: 8.5.1; 8.5.1.1; 8.5.1.2; 8.5.2; 8.5.2.1 |
| CVE-2013-0553 | – | Apr 28 | The client implementation in IBM Sametime 8.5.1 through 8.5.2.1, as used in Sametime Connect client, Sametime Advanced Connect client, Sametime Advanced Web client, and other… Affected: 8.5.2.0; 8.5.2.1 |
| CVE-2012-3308 | – | Aug 17 | Cross-site scripting (XSS) vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat Affected: 8.0.2.0; 8.0.2.1; 8.5.0.0; 8.5.1.0; 8.5.1.1; 8.5.2.0; +1 more |
Showing 46