Skip to content
Sign in
Not rated

CVE-2016-2979 IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting

Description

IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 113945.

Affected products and versions

Product Affected versions Fixed in
Sametime 9.0 9.0 → 9.0.1 No fix stated
Sametime 8.5 8.5.2 → 8.5.2.1 No fix stated

Other CVEs of Sametime

The 22 CVEs of Sametime →
CVE-2016-2964 IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may… Not rated CVE-2016-2980 The Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site can inject their own… Not rated CVE-2016-2975 IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting Not rated CVE-2016-2976 IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive… Not rated
Track this CVE