Lucene search

K

22 matches found

CVE
CVE
added 2017/08/29 9:29 p.m.40 views

CVE-2016-2974

IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934.

3.3CVSS3.6AI score0.00063EPSS
CVE
CVE
added 2017/08/29 9:29 p.m.38 views

CVE-2016-2967

IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Sametime away message altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 113848.

5.4CVSS5.2AI score0.00269EPSS
CVE
CVE
added 2017/08/29 6:29 p.m.38 views

CVE-2016-2971

IBM Sametime Media Services 8.5.2 and 9.0 can disclose sensitive information in stack trace error logs that could aid an attacker in future attacks. IBM X-Force ID: 113898.

5.3CVSS4.9AI score0.00247EPSS
CVE
CVE
added 2017/08/29 9:29 p.m.38 views

CVE-2016-2975

IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 113935.

5.4CVSS5.2AI score0.00269EPSS
CVE
CVE
added 2017/08/29 6:29 p.m.38 views

CVE-2016-2977

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands in the meeting. IBM X-Force ID: 113937.

4.3CVSS4.4AI score0.00242EPSS
CVE
CVE
added 2017/08/29 6:29 p.m.37 views

CVE-2016-10503

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of Sametime meeting to lower any or all hands in an e-meeting, thus spoofing results of votes in the meeting. IBM X-Force ID: 113803.

4.3CVSS4.3AI score0.00165EPSS
CVE
CVE
added 2017/08/29 9:29 p.m.37 views

CVE-2016-2966

IBM Sametime 8.5.1 and 9.0 could allow an authenticated user to enumerate meeting rooms by guessing the meeting room id. IBM X-Force ID: 113847.

4.3CVSS4.4AI score0.00212EPSS
CVE
CVE
added 2017/08/29 9:29 p.m.37 views

CVE-2016-2980

The Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site can inject their own script by exploiting a vulnerability in the way that the WebPlayer works. IBM X-Force ID: 113993.

6.8CVSS6.2AI score0.00315EPSS
CVE
CVE
added 2017/08/29 1:35 a.m.36 views

CVE-2016-2970

IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers. IBM X-Force ID: 113851.

4.3CVSS4.3AI score0.00264EPSS
CVE
CVE
added 2017/08/29 9:29 p.m.36 views

CVE-2016-2978

IBM Sametime 8.5.2 and 9.0 could store potentially sensitive information from the browser cache locally that could be available to a local user. IBM X-Force ID: 113938.

3.3CVSS3.5AI score0.00054EPSS
CVE
CVE
added 2017/08/29 6:29 p.m.34 views

CVE-2016-0354

IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user to upload a malicious file to a Sametime meeting room, that could be downloaded by unsuspecting users which could be executed with user privileges. IBM X-Force ID: 111893.

6CVSS5.2AI score0.00346EPSS
CVE
CVE
added 2017/08/29 9:29 p.m.34 views

CVE-2016-2964

IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may reveal details about the application. IBM X-Force ID: 113813.

5.3CVSS5.1AI score0.00222EPSS
CVE
CVE
added 2017/08/29 6:29 p.m.33 views

CVE-2016-2965

IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading a user to visit a malicious link, a remote attacker could force the user to log out of Sametime. IBM X-Force ID: 113846.

6.5CVSS6.2AI score0.00152EPSS
CVE
CVE
added 2017/08/29 6:29 p.m.32 views

CVE-2016-2959

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting room manager to remove the primary managers privileges. IBM X-Force ID: 113804.

4.3CVSS4.4AI score0.00242EPSS
CVE
CVE
added 2017/08/29 6:29 p.m.32 views

CVE-2016-2973

IBM Sametime Media Services 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 113899.

5.4CVSS5.2AI score0.00272EPSS
CVE
CVE
added 2017/08/29 6:29 p.m.31 views

CVE-2016-0355

IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease through the use of cross-site request forgery. IBM X-Force ID: 111894.

6.5CVSS6.1AI score0.00261EPSS
CVE
CVE
added 2017/08/29 9:29 p.m.31 views

CVE-2016-0358

IBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat ID numbers and join meetings that he was not invited to. IBM X-Force ID: 111928.

4.3CVSS4.3AI score0.00212EPSS
CVE
CVE
added 2017/08/29 6:29 p.m.30 views

CVE-2016-2979

IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 113945.

5.4CVSS5.2AI score0.00272EPSS
CVE
CVE
added 2017/08/29 9:29 p.m.29 views

CVE-2016-2976

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive information by viewing the meeting report history. IBM X-Force ID: 113936.

4.3CVSS4.2AI score0.00212EPSS
CVE
CVE
added 2017/08/29 6:29 p.m.28 views

CVE-2016-0356

IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease through the use of cross-site request forgery. IBM X-Force ID: 111895.

6.5CVSS6.1AI score0.00261EPSS
CVE
CVE
added 2017/08/29 6:29 p.m.28 views

CVE-2016-2969

IBM Sametime Meeting Server 8.5.2 and 9.0 may send replies that contain emails of people that should not be in these messages. IBM X-Force ID: 113850.

4.3CVSS4.5AI score0.00235EPSS
CVE
CVE
added 2017/08/29 6:29 p.m.28 views

CVE-2016-2972

IBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user in the local cache of their browser which could be accessed by a local user. IBM X-Force ID: 113855.

7.8CVSS7.1AI score0.00064EPSS