PT-2014-3177

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.2 through 8.5.2.1 IBM Sametime version 9.0 before HF1 Description The issue is related to the Connect client in IBM Sametime, which does not properly restrict unsigned Java plugins. This allows remote attackers to...

CVE-2013-6727: Undefined Security Weakness

The Connect client in IBM Sametime 8.5.2 through 8.5.2.1 and 9.0 before HF1 does not properly restrict unsigned Java plugins, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2013-6733

Cross-site scripting XSS vulnerability in the Web Application in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Application in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6733

Cross-site scripting XSS vulnerability in the Web Application in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6733

CVE-2013-6733 describes a cross-site scripting (XSS) vulnerability in the Web Application of the IBM Sametime Classic Meeting Server, affecting versions 7.5.1.2 through 8.5.2.1. The root cause is an XSS flaw in the Web Application component, allowing remote attackers to inject arbitrary script or...

PT-2013-6102

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 7.5.1.2 through 8.5.2.1 Description A cross-site scripting XSS issue exists in the Web Application of the Classic Meeting Server, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For IBM...

CVE-2013-6733: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web Application in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0534

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory...

Default credentials

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory...

CVE-2013-0534

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory...

CVE-2013-0534

Affected software: IBM Sametime Connect Client (versions 8.5.1 to 8.5.2.x as described) used with Lotus Notes client. Issue: Information disclosure via persistence of cleartext password strings in process memory. Root cause (as described): password data stored in memory in cleartext, enabling loc...

PT-2013-2410

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.1 through 8.5.2.1 Description The issue allows local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory. Recommendations For IBM Sametime versions...

CVE-2013-0534: Undefined Security Weakness

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0535

Multiple cross-site scripting XSS vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0535

Multiple cross-site scripting XSS vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-2411

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 7.5.1.2 through 8.5.2.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Classic Meeting Server. These vulnerabilities allow remote authenticated users to inject arbitrary web script...

CVE-2013-0535: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0533

Cross-site scripting XSS vulnerability in the Sametime Links server in IBM Sametime 8.0.2 through 8.5.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...