Skip to content
Sign in
Not rated

CVE-2016-2980 The Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site can inject their own…

Description

The Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site can inject their own script by exploiting a vulnerability in the way that the WebPlayer works. IBM X-Force ID: 113993.

Affected products and versions

Product Affected versions Fixed in
Sametime 9.0 9.0 → 9.0.1 No fix stated
Sametime 8.5 8.5.2 → 8.5.2.1 No fix stated

Other CVEs of Sametime

The 22 CVEs of Sametime →
CVE-2016-2964 IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may… Not rated CVE-2016-2976 IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive… Not rated CVE-2016-2975 IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting Not rated CVE-2016-2966 IBM Sametime 8.5.1 and 9.0 could allow an authenticated user to enumerate meeting rooms by guessing the meeting room id Not rated
Track this CVE