5.9
Medium
CVE-2023-50349 Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability
Description
Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability. Some REST APIs in the Sametime Proxy application can allow an attacker to perform malicious actions on the application.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL Sametime | Versions not published |
Other CVEs of HCL Sametime
The 7 CVEs of HCL Sametime →
CVE-2025-32000
HCL Sametime is vulnerable to insufficient input sanitization
4.3
Medium
CVE-2023-45698
Sametime is impacted by lack of clickjacking protection in Outlook add-in
4.8
Medium
CVE-2023-45696
Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client
4.0
Medium
CVE-2023-45718
Sametime is impacted by a failure to invalidate sessions
3.9
Low