6.5
Medium
CVE-2022-42446 Starting with Sametime 12, anonymous users are enabled by default
Description
Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ability to browse the User Directory and potentially create chats with internal users.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL Sametime | Versions not published |
Other CVEs of HCL Sametime
The 7 CVEs of HCL Sametime →
CVE-2025-32000
HCL Sametime is vulnerable to insufficient input sanitization
4.3
Medium
CVE-2023-45698
Sametime is impacted by lack of clickjacking protection in Outlook add-in
4.8
Medium
CVE-2023-45696
Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client
4.0
Medium
CVE-2023-45718
Sametime is impacted by a failure to invalidate sessions
3.9
Low