4.3
Medium
CVE-2025-32000 HCL Sametime is vulnerable to insufficient input sanitization
Description
HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input. When user input is implicitly or explicitly trusted without sufficient sanitization, malicious actors can leverage this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL Sametime | Versions not published |
Other CVEs of HCL Sametime
The 7 CVEs of HCL Sametime →
CVE-2023-45698
Sametime is impacted by lack of clickjacking protection in Outlook add-in
4.8
Medium
CVE-2023-45696
Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client
4.0
Medium
CVE-2023-45718
Sametime is impacted by a failure to invalidate sessions
3.9
Low
CVE-2023-45716
Sametime is impacted by sensitive information passed in URL
1.7
Low