EUVD-2014-4667

Malware in sbrugna...

CVE-2014-4766

CVE-2014-4766 affects IBM Sametime Classic Meeting Server 8.0.x and 8.5.x. A remote attacker can read an exported Record and Playback (RAP) file to obtain sensitive information. The CVSSv2 base score is 5.0 (Medium) with network access and low attack complexity; no authentication required and no ...

PT-2014-6108

Name of the Vulnerable Software and Affected Versions IBM Sametime Classic Meeting Server versions 8.0.x through 8.5.x Description The issue allows remote attackers to obtain sensitive information by reading an exported Record and Playback RAP file. Recommendations For versions 8.0.x through 8.5....

CVE-2014-4766: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sametime Classic Meeting Server 8.0.x and 8.5.x allows remote attackers to obtain sensitive information by reading an exported Record and Playback RAP file...

IBM Sametime Classic Meeting Server 8.x - 8.5.2.1 Multiple Vulnerabilities - Active Check

IBM Sametime Classic Meeting Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site scripting

Cross-site scripting XSS vulnerability in the Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-4748

CVE-2014-4748 is an XSS vulnerability in the IBM Sametime Classic Meeting Server (8.x up to 8.5.2.1). The issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL, enabling client-side script execution. The NVD entry reports a CVSSv2 base score of 4.3 (MEDIUM) with a...

CVE-2014-4748: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-4747: Exposure of Sensitive Information to an Unauthorized Actor

The Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows physically proximate attackers to discover a meeting password hash by leveraging access to an unattended workstation to read HTML source code within a victim's browser...

PT-2014-6093

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.x through 8.5.2.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL. This affects the Classic Meeting Server component. Recommendatio...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Application in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6733

Cross-site scripting XSS vulnerability in the Web Application in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-6102

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 7.5.1.2 through 8.5.2.1 Description A cross-site scripting XSS issue exists in the Web Application of the Classic Meeting Server, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For IBM...

PT-2013-2411

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 7.5.1.2 through 8.5.2.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Classic Meeting Server. These vulnerabilities allow remote authenticated users to inject arbitrary web script...

CVE-2013-0535: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...