827 matches found
CVE-2013-3988: Improper Input Validation
The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...
CVE-2013-6742: Undefined Security Weakness
The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation...
PT-2014-3186
Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.2 through 8.5.2.1 IBM Sametime versions 9.x through 9.0.0.1 Description The issue allows remote attackers to obtain access by leveraging an unattended workstation, due to the lack of an off autocomplete attribute for ...
PT-2014-3187
Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.2 through 8.5.2.1 IBM Sametime versions 9.x through 9.0.0.1 Description A cross-site scripting XSS issue exists in the Meeting Server component, allowing remote authenticated users to inject arbitrary web script or HT...
PT-2014-2726
Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.2 through 8.5.2.1 IBM Sametime versions 9.x through 9.0.0.1 Description The issue concerns the Meeting Server in IBM Sametime, where it fails to validate URLs in Cookie headers before using them in redirects. This has...
CVE-2013-6727
The Connect client in IBM Sametime 8.5.2 through 8.5.2.1 and 9.0 before HF1 does not properly restrict unsigned Java plugins, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2013-6727
The Connect client in IBM Sametime 8.5.2 through 8.5.2.1 and 9.0 before HF1 does not properly restrict unsigned Java plugins, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2013-6727
IBM Lotus Sametime Connect Client (Windows) is affected by CVE-2013-6727. The vulnerability arises because the Connect client does not properly restrict unsigned Java plugins, enabling a remote attacker to disclose confidential information via unspecified vectors. Affected versions are IBM Sameti...
CVE-2013-6727: Undefined Security Weakness
The Connect client in IBM Sametime 8.5.2 through 8.5.2.1 and 9.0 before HF1 does not properly restrict unsigned Java plugins, which allows remote attackers to obtain sensitive information via unspecified vectors...
PT-2014-3177
Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.2 through 8.5.2.1 IBM Sametime version 9.0 before HF1 Description The issue is related to the Connect client in IBM Sametime, which does not properly restrict unsigned Java plugins. This allows remote attackers to...
IBM Lotus Sametime Version Enumeration
This module scans an IBM Lotus Sametime web interface to enumerate the application's version and configuration information. Module Options msf use auxiliary/gather/ibm/sametimeversion msf undefinedsametimeversion show actions ...actions... msf undefinedsametimeversion set ACTION msf...
IBM Lotus Notes Sametime User Enumeration
This module extracts usernames using the IBM Lotus Notes Sametime web interface using either a dictionary attack which is preferred, or a bruteforce attack trying all usernames of MAXDEPTH length or less. Module Options msf use auxiliary/gather/ibm/sametimeenumerateusers msf...
IBM Lotus Notes Sametime Room Name Bruteforce
This module bruteforces Sametime meeting room names via the IBM Lotus Notes Sametime web interface. Module Options msf use auxiliary/gather/ibm/sametimeroombrute msf undefinedsametimeroombrute show actions ...actions... msf undefinedsametimeroombrute set ACTION msf undefinedsametimeroombrute show...
CVE-2013-6733
Cross-site scripting XSS vulnerability in the Web Application in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Web Application in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6733
CVE-2013-6733 describes a cross-site scripting (XSS) vulnerability in the Web Application of the IBM Sametime Classic Meeting Server, affecting versions 7.5.1.2 through 8.5.2.1. The root cause is an XSS flaw in the Web Application component, allowing remote attackers to inject arbitrary script or...
CVE-2013-6733
Cross-site scripting XSS vulnerability in the Web Application in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2013-6102
Name of the Vulnerable Software and Affected Versions IBM Sametime versions 7.5.1.2 through 8.5.2.1 Description A cross-site scripting XSS issue exists in the Web Application of the Classic Meeting Server, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For IBM...
CVE-2013-6733: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Web Application in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...