CVE-2013-3985
- EPSS 0.11%
- Veröffentlicht 09.11.2013 01:55:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable.
CVE-2013-3045
- EPSS 0.15%
- Veröffentlicht 09.11.2013 01:55:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to share crafted links via the Library function.
CVE-2013-3044
- EPSS 0.15%
- Veröffentlicht 09.11.2013 01:55:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges.
CVE-2013-0537
- EPSS 0.15%
- Veröffentlicht 09.11.2013 01:55:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges.
CVE-2013-3986
- EPSS 40.57%
- Veröffentlicht 08.11.2013 15:55:13
- Zuletzt bearbeitet 11.04.2025 00:51:21
IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service (WebPlayer Firefox extension crash) via a crafted Audio Visual (AV) session.
CVE-2013-0534
- EPSS 0.05%
- Veröffentlicht 21.06.2013 14:55:01
- Zuletzt bearbeitet 11.04.2025 00:51:21
The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings with...
CVE-2013-0535
- EPSS 0.16%
- Veröffentlicht 02.05.2013 18:55:00
- Zuletzt bearbeitet 11.04.2025 00:51:21
Multiple cross-site scripting (XSS) vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-0533
- EPSS 0.14%
- Veröffentlicht 28.04.2013 03:24:14
- Zuletzt bearbeitet 11.04.2025 00:51:21
Cross-site scripting (XSS) vulnerability in the Sametime Links server in IBM Sametime 8.0.2 through 8.5.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-0553
- EPSS 0.14%
- Veröffentlicht 28.04.2013 03:24:14
- Zuletzt bearbeitet 11.04.2025 00:51:21
The client implementation in IBM Sametime 8.5.1 through 8.5.2.1, as used in Sametime Connect client, Sametime Advanced Connect client, Sametime Advanced Web client, and other products, allows remote authenticated users to send commands to individual ...
- EPSS 0.25%
- Veröffentlicht 29.10.2011 10:55:08
- Zuletzt bearbeitet 11.04.2025 00:51:21
The default configuration of the Sametime configuration servlet (SCS) in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a...