CVE-2011-1106

The CVE-2011-1106 entry describes a cross-site scripting (XSS) vulnerability in IBM Lotus Sametime Server’s Lotus Sametime component, specifically related to stcenter.nsf. The underlying issue is that an attacker can supply a crafted authReasonCode parameter in an OpenDatabase action, enabling re...

CVE-2013-0534

Affected software: IBM Sametime Connect Client (versions 8.5.1 to 8.5.2.x as described) used with Lotus Notes client. Issue: Information disclosure via persistence of cleartext password strings in process memory. Root cause (as described): password data stored in memory in cleartext, enabling loc...

CVE-2008-2499

The CVE-2008-2499 issue is a stack-based buffer overflow in IBM Lotus Sametime’s Community Services Multiplexer (STMux.exe). The vulnerability arises from inadequate bounds-checking while parsing long URLs, allowing a remote attacker to cause arbitrary code execution. Affected products include IB...

CVE-2013-0553

CVE-2013-0553 affects IBM Sametime 8.5.1–8.5.2.1 (Sametime Connect, Advanced Connect, Advanced Web clients, and related products). The issue allows remote authenticated users to send commands to individual chat users or to all participants in a chat room via a crafted Sametime Instant Message. Th...

CVE-2007-1784

The CVE-2007-1784 entry affects IBM Lotus Notes Sametime (JNILoader ActiveX: STJNILoader.ocx, version 3.1.0.26) where remote attackers can cause arbitrary code execution by passing arbitrary arguments to the loadLibrary function, enabling loading of arbitrary DLLs. Impact is described as remote c...

CVE-2011-1038

The CVE corresponds to a cross-site scripting (XSS) vulnerability in IBM Lotus Sametime 8.0.1, affecting the server’s stconf.nsf handling. The issue arises because input to the messageString parameter of a WebMessage action and the PATH_INFO is not properly sanitized, enabling remote attackers to...

CVE-2013-3045

IBM Lotus Sametime Enterprise Meeting Server versions 8.5.2 and 8.5.2.1 are described as vulnerable to remote-authenticated users who can share crafted links via the Library function. The available documents identify the affected product and feature but do not disclose the underlying root cause d...

CVE-2013-3986

CVE-2013-3986 affects IBM Lotus Sametime 8.5.2 and 8.5.2.1. The vulnerability allows remote attackers to cause a denial-of-service by crafting an Audio Visual (AV) session that crashes the WebPlayer Firefox extension. Public details indicate exploitation targets the Sametime WebPlayer plug-in dur...

CVE-2007-4142

CVE-2007-4142 describes a cross-site scripting (XSS) vulnerability in IBM Lotus Sametime Server 7.5.1 before 20070731, where remote attackers can inject arbitrary web script or HTML via unspecified vectors involving a crafted Sametime meeting. Public references (IBM support note, advisories, and ...

CVE-2008-0354

CVE-2008-0354 describes a cross-site scripting (XSS) flaw in the IBM Lotus Sametime Connect Client for Windows (versions 7.5 and 7.5.1). The vulnerability allows a user-assisted attacker to inject arbitrary script/HTML via a crafted chat message, with code execution triggered after a mouseover ev...

CVE-2013-3044

CVE-2013-3044 affects IBM Lotus Sametime Enterprise Meeting Server versions 8.5.2 and 8.5.2.1, where remote authenticated users can spoof the origin of chat messages or publish anonymous messages by abusing meeting-attendance privileges. The issue lies in the meeting server’s handling of attendan...

CVE-2013-0535

The CVE-2013-0535 entries describe multiple XSS vulnerabilities in IBM Sametime Classic Meeting Server, affecting versions 7.5.1.2 through 8.5.2.1. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The connected records do not provide expl...

CVE-2007-6295

The documents confirm CVE-2007-6295 is an XSS vulnerability in IBM Lotus Sametime prior to version 8.0, affecting the WebRunMenuFrame page of the online meeting center template. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the URI, with attack vector over n...

CVE-2013-0537

The CVE-2013-0537 issue affects IBM Lotus Sametime Enterprise Meeting Server versions 8.5.2 and 8.5.2.1, where remote authenticated users can spoof the origin of shared links by abusing meeting-attendance privileges. The vulnerability concern is tied to how attendance privileges are handled, enab...

CVE-2011-1370

The vulnerability CVE-2011-1370 affects IBM Lotus Sametime Server, specifically the Sametime configuration servlet (SCS) in versions 7.0 through 8.5.2. The root cause is lack of authentication on the configuration servlet, enabling remote readers to access configuration settings via responses. Im...

CVE-2013-0533

Technical details about CVE-2013-0533 are not publicly provided in the connected documents. The initial sources only reiterate the XSS vulnerability in IBM Sametime 8.0.2–8.5.2.1. Monitor for future updates.

CVE-2010-3398

CVE-2010-3398 affects IBM Lotus Sametime Connect 8.5.1 before CF1, via an unspecified vulnerability in the webcontainer implementation (SPR LXUU87S57H and LXUU87S93W). The connected documents do not disclose impact, attack vectors, exploitation details, or a remediation. Information aligns on the...

CVE-2013-3985

The CVE-2013-3985 entry concerns IBM Lotus Sametime Enterprise Meeting Server 8.5.2 and 8.5.2.1, where insufficient restriction of application cookies allows remote attackers to read session variables via a weak Domain setting. This exposes partial confidentiality (session data) with an adjacent-...