CVE-2013-3045

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to share crafted links via the Library function...

CVE-2013-3985

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable...

CVE-2013-3044

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges...

Code injection

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges...

Code injection

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to share crafted links via the Library function...

Design/Logic Flaw

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable...

CVE-2013-0537

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges...

CVE-2013-3045

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to share crafted links via the Library function...

CVE-2013-3985

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable...

CVE-2013-0537

The CVE-2013-0537 issue affects IBM Lotus Sametime Enterprise Meeting Server versions 8.5.2 and 8.5.2.1, where remote authenticated users can spoof the origin of shared links by abusing meeting-attendance privileges. The vulnerability concern is tied to how attendance privileges are handled, enab...

CVE-2013-3044

CVE-2013-3044 affects IBM Lotus Sametime Enterprise Meeting Server versions 8.5.2 and 8.5.2.1, where remote authenticated users can spoof the origin of chat messages or publish anonymous messages by abusing meeting-attendance privileges. The issue lies in the meeting server’s handling of attendan...

CVE-2013-3045

IBM Lotus Sametime Enterprise Meeting Server versions 8.5.2 and 8.5.2.1 are described as vulnerable to remote-authenticated users who can share crafted links via the Library function. The available documents identify the affected product and feature but do not disclose the underlying root cause d...

CVE-2013-3985

The CVE-2013-3985 entry concerns IBM Lotus Sametime Enterprise Meeting Server 8.5.2 and 8.5.2.1, where insufficient restriction of application cookies allows remote attackers to read session variables via a weak Domain setting. This exposes partial confidentiality (session data) with an adjacent-...

CVE-2013-3044

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges...

PT-2013-4118

Name of the Vulnerable Software and Affected Versions IBM Lotus Sametime versions 8.5.2 through 8.5.2.1 Description The issue allows remote authenticated users to spoof the origin of chat messages or compose anonymous chat messages by leveraging meeting-attendance privileges. Recommendations For...

PT-2013-2413

Name of the Vulnerable Software and Affected Versions IBM Lotus Sametime versions 8.5.2 through 8.5.2.1 Description The issue allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges. Recommendations For versions 8.5.2 through 8.5.2.1,...

PT-2013-4119

Name of the Vulnerable Software and Affected Versions IBM Lotus Sametime versions 8.5.2 through 8.5.2.1 Description The issue allows remote authenticated users to share crafted links via the Library function, potentially leading to unspecified consequences. Recommendations For versions 8.5.2...

PT-2013-4771

Name of the Vulnerable Software and Affected Versions IBM Lotus Sametime versions 8.5.2 through 8.5.2.1 Description The issue concerns a problem with the Enterprise Meeting Server in IBM Lotus Sametime, where application cookies are not properly restricted. This allows remote attackers to read...

CVE-2013-0537: Undefined Security Weakness

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges...

CVE-2013-3044: Undefined Security Weakness

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges...