EUVD-2016-4042

Malware in sbrugna...

EUVD-2016-4050

Malware in sbrugna...

EUVD-2016-4052

Malware in sbrugna...

EUVD-2016-4032

Malware in sbrugna...

EUVD-2016-4038

Malware in sbrugna...

EUVD-2016-0389

Malware in sbrugna...

EUVD-2016-4045

Malware in sbrugna...

Design/Logic Flaw

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of Sametime meeting to lower any or all hands in an e-meeting, thus spoofing results of votes in the meeting. IBM X-Force ID: 113803...

CVE-2016-2977

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands in the meeting. IBM X-Force ID: 113937...

PT-2017-8281

Name of the Vulnerable Software and Affected Versions IBM Sametime Meeting Server versions 8.5.2 through 9.0 Description The issue allows credentials of the Sametime Meetings user to be stored in the local cache of their browser, which could be accessed by a local user. Recommendations For versio...

PT-2017-8286

Name of the Vulnerable Software and Affected Versions IBM Sametime Meeting Server versions 8.5.2 through 9.0 Description The issue allows a malicious user to lower other users' hands in a meeting, potentially disrupting the meeting process. Recommendations For versions 8.5.2 through 9.0, at the...

CVE-2016-2972: Undefined Security Weakness

IBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user in the local cache of their browser which could be accessed by a local user. IBM X-Force ID: 113855...

CVE-2016-2959: Undefined Security Weakness

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting room manager to remove the primary managers privileges. IBM X-Force ID: 113804...

PT-2017-8273

Name of the Vulnerable Software and Affected Versions IBM Sametime Meeting Server versions 8.5.2 through 9.0 Description The issue allows a meeting room manager to remove the primary manager's privileges. Recommendations For IBM Sametime Meeting Server versions 8.5.2 through 9.0, consider...

PT-2017-8288

Name of the Vulnerable Software and Affected Versions IBM Sametime Meeting Server versions 8.5.2 through 9.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

CVE-2016-2976: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive information by viewing the meeting report history. IBM X-Force ID: 113936...

CVE-2016-2969: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sametime Meeting Server 8.5.2 and 9.0 may send replies that contain emails of people that should not be in these messages. IBM X-Force ID: 113850...

PT-2017-8278

Name of the Vulnerable Software and Affected Versions IBM Sametime Meeting Server versions 8.5.2 through 9.0 Description The issue allows IBM Sametime Meeting Server to send replies that contain emails of people who should not be included in these messages. Recommendations For versions 8.5.2...

CVE-2016-2965: Cross-Site Request Forgery (CSRF)

IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading a user to visit a malicious link, a remote attacker could force the user to log out of Sametime. IBM X-Force ID: 113846...

CVE-2016-2979: Improper Neutralization of Input During Web Page Generation

IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 113945...