CVE-2013-3044

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges...

CVE-2013-3045

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to share crafted links via the Library function...

CVE-2013-0537

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges...

CVE-2013-3985

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable...

Design/Logic Flaw

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable...

Code injection

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to share crafted links via the Library function...

Code injection

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges...

CVE-2013-0537

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges...

CVE-2013-0537

The CVE-2013-0537 issue affects IBM Lotus Sametime Enterprise Meeting Server versions 8.5.2 and 8.5.2.1, where remote authenticated users can spoof the origin of shared links by abusing meeting-attendance privileges. The vulnerability concern is tied to how attendance privileges are handled, enab...

CVE-2013-3045

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to share crafted links via the Library function...

CVE-2013-3045

IBM Lotus Sametime Enterprise Meeting Server versions 8.5.2 and 8.5.2.1 are described as vulnerable to remote-authenticated users who can share crafted links via the Library function. The available documents identify the affected product and feature but do not disclose the underlying root cause d...

CVE-2013-3985

The CVE-2013-3985 entry concerns IBM Lotus Sametime Enterprise Meeting Server 8.5.2 and 8.5.2.1, where insufficient restriction of application cookies allows remote attackers to read session variables via a weak Domain setting. This exposes partial confidentiality (session data) with an adjacent-...

CVE-2013-3044

CVE-2013-3044 affects IBM Lotus Sametime Enterprise Meeting Server versions 8.5.2 and 8.5.2.1, where remote authenticated users can spoof the origin of chat messages or publish anonymous messages by abusing meeting-attendance privileges. The issue lies in the meeting server’s handling of attendan...

CVE-2013-3985

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable...

CVE-2013-3044

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges...

CVE-2013-3986

IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service WebPlayer Firefox extension crash via a crafted Audio Visual AV session...

Session fixation

IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service WebPlayer Firefox extension crash via a crafted Audio Visual AV session...

CVE-2013-3986

IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service WebPlayer Firefox extension crash via a crafted Audio Visual AV session...

CVE-2013-3986

CVE-2013-3986 affects IBM Lotus Sametime 8.5.2 and 8.5.2.1. The vulnerability allows remote attackers to cause a denial-of-service by crafting an Audio Visual (AV) session that crashes the WebPlayer Firefox extension. Public details indicate exploitation targets the Sametime WebPlayer plug-in dur...

KLA10204 DoS vulnerability in IBM Lotus Sametime

An unspecified vulnerability was found in the IBM Lotus Sametime. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially desgined AV session. Original advisories - Related products IBM-Lotus-Sametime CVE list...