274 matches found
PT-2017-8281
Name of the Vulnerable Software and Affected Versions IBM Sametime Meeting Server versions 8.5.2 through 9.0 Description The issue allows credentials of the Sametime Meetings user to be stored in the local cache of their browser, which could be accessed by a local user. Recommendations For versio...
PT-2017-7610
Name of the Vulnerable Software and Affected Versions IBM Sametime Enterprise Meeting Server versions 8.5.2 through 9.0 Description The issue allows an authenticated user to upload a malicious file to a meeting room, which could then be downloaded by other users. This malicious file could be...
PT-2017-8275
Name of the Vulnerable Software and Affected Versions IBM Sametime Meeting Server versions 8.5.2 through 9.0 Description The issue is caused by improper validation of user-supplied input, allowing for cross-site request forgery. A remote attacker could force a user to log out of Sametime by...
PT-2017-8277
Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.2 through 9.0 Description The issue allows users to embed arbitrary JavaScript code in the Sametime away message, altering the intended functionality and potentially leading to credentials disclosure within a trusted...
CVE-2016-2969: Exposure of Sensitive Information to an Unauthorized Actor
IBM Sametime Meeting Server 8.5.2 and 9.0 may send replies that contain emails of people that should not be in these messages. IBM X-Force ID: 113850...
PT-2017-8284
Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.2 through 9.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...
PT-2017-8280
Name of the Vulnerable Software and Affected Versions IBM Sametime Media Services versions 8.5.2 through 9.0 Description The issue allows sensitive information to be disclosed in stack trace error logs, potentially aiding an attacker in future attacks. Recommendations For versions 8.5.2 through...
CVE-2016-2965: Cross-Site Request Forgery (CSRF)
IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading a user to visit a malicious link, a remote attacker could force the user to log out of Sametime. IBM X-Force ID: 113846...
IBM Sametime Meetings Server Arbitrary File Upload Vulnerability
IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video.Sametime Enterprise Meeting Server is one of the enterprise media servers. A security...
PT-2017-8279
Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5 through 9.0 Description The issue allows an error message to provide detailed information about the application, potentially giving attackers valuable details. Recommendations For IBM Sametime versions 8.5 through 9.0...
CVE-2014-4766
IBM Sametime Classic Meeting Server 8.0.x and 8.5.x allows remote attackers to obtain sensitive information by reading an exported Record and Playback RAP file...
Design/Logic Flaw
IBM Sametime Classic Meeting Server 8.0.x and 8.5.x allows remote attackers to obtain sensitive information by reading an exported Record and Playback RAP file...
CVE-2014-4766
IBM Sametime Classic Meeting Server 8.0.x and 8.5.x allows remote attackers to obtain sensitive information by reading an exported Record and Playback RAP file...
PT-2014-6108
Name of the Vulnerable Software and Affected Versions IBM Sametime Classic Meeting Server versions 8.0.x through 8.5.x Description The issue allows remote attackers to obtain sensitive information by reading an exported Record and Playback RAP file. Recommendations For versions 8.0.x through 8.5....
CVE-2014-4766: Exposure of Sensitive Information to an Unauthorized Actor
IBM Sametime Classic Meeting Server 8.0.x and 8.5.x allows remote attackers to obtain sensitive information by reading an exported Record and Playback RAP file...
IBM Sametime Classic Meeting Server 8.x - 8.5.2.1 Multiple Vulnerabilities - Active Check
IBM Sametime Classic Meeting Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBM Sametime Meet Server 8.5 Arbitrary File Upload
Exploit Title: IBM Sametime Meet Server 8.5 Arbitrary File Upload Google Dork: intitle:"New Meet - IBM Lotus Sametime" Date: 11/08/2014 CVSS Score: http://nvd.nist.gov/cvss.cfm?calculator&version=2&vector=AV:N/AC:M/Au:N/C:P/I:P/A:P CVE-ID: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2014-3088...
IBM Sametime Meet Server 8.5 Password Disclosure
Exploit Title: IBM Sametime Meet Server 8.5 Password Disclosure Google Dork: intitle:"Meeting Center - IBM Lotus Sametime" Date: 11/08/2014 CVSS Score: http://nvd.nist.gov/cvss.cfm?calculator&version=2&vector=AV:L/AC:L/Au:N/C:P/I:N/A:N CVE-ID:...
CVE-2014-4747
The Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows physically proximate attackers to discover a meeting password hash by leveraging access to an unattended workstation to read HTML source code within a victim's browser...