SA
Product
Sametime
46
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 20Low 2
Watch
Add Sametime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2965 | 6.5 | Aug 29 | IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-0356 | 6.5 | Aug 29 | IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease… Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-0355 | 6.5 | Aug 29 | IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease… Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2980 | 6.3 | Aug 29 | The Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site can inject their own script by exploiting a vulnerability in the way that the… Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-0354 | 5.5 | Aug 29 | IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user to upload a malicious file to a Sametime meeting room, that could be downloaded by… Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2975 | 5.4 | Aug 29 | IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2967 | 5.4 | Aug 29 | IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2979 | 5.4 | Aug 29 | IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2973 | 5.4 | Aug 29 | IBM Sametime Media Services 8.5.2 and 9.0 is vulnerable to cross-site scripting Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2012-3331 | 5.3 | Feb 8 | IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF Affected: 6.5.1.0; 7.0.0.0; 7.5.0.0; 7.5.1.0; 7.5.1.1; 7.5.1.2; +9 more |
| CVE-2016-2964 | 5.3 | Aug 29 | IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may reveal details about the application Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2971 | 5.3 | Aug 29 | IBM Sametime Media Services 8.5.2 and 9.0 can disclose sensitive information in stack trace error logs that could aid an attacker in future attacks Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2976 | 4.3 | Aug 29 | IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive information by viewing the meeting report history Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2966 | 4.3 | Aug 29 | IBM Sametime 8.5.1 and 9.0 could allow an authenticated user to enumerate meeting rooms by guessing the meeting room id Affected: 8.5.1.0; 8.5.1.1; 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; +1 more |
| CVE-2016-0358 | 4.3 | Aug 29 | IBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat ID numbers and join meetings that he was not invited to Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2977 | 4.3 | Aug 29 | IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands in the meeting Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2969 | 4.3 | Aug 29 | IBM Sametime Meeting Server 8.5.2 and 9.0 may send replies that contain emails of people that should not be in these messages Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2959 | 4.3 | Aug 29 | IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting room manager to remove the primary managers privileges Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-10503 | 4.3 | Aug 29 | IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of Sametime meeting to lower any or all hands in an e-meeting, thus spoofing results of… Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
| CVE-2016-2970 | 4.3 | Aug 29 | IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers Affected: 8.5.2.0; 8.5.2.1; 9.0.0.0; 9.0.0.1; 9.0.1 |
Showing 20