Skip to content
Sign in
Not rated

CVE-2016-2967 IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting

Description

IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Sametime away message altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 113848.

Affected products and versions

Product Affected versions Fixed in
Sametime 9.0 9.0 → 9.0.1 No fix stated
Sametime 8.5 8.5.2 → 8.5.2.1 No fix stated

Other CVEs of Sametime

The 22 CVEs of Sametime →
CVE-2016-2964 IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may… Not rated CVE-2016-2974 IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive… Not rated CVE-2016-2975 IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting Not rated CVE-2016-2976 IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive… Not rated
Track this CVE