| CVE-2025-32000 |
HCL Sametime is vulnerable to insufficient input sanitization
|
4.3
Medium
|
Sep 24, 2026 |
| CVE-2023-45698 |
Sametime is impacted by lack of clickjacking protection in Outlook add-in
|
4.8
Medium
|
Feb 10, 2024 |
| CVE-2023-45696 |
Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client
|
4.0
Medium
|
Feb 10, 2024 |
| CVE-2023-45718 |
Sametime is impacted by a failure to invalidate sessions
|
3.9
Low
|
Feb 9, 2024 |
| CVE-2023-45716 |
Sametime is impacted by sensitive information passed in URL
|
1.7
Low
|
Feb 9, 2024 |
| CVE-2023-50349 |
Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability
|
5.9
Medium
|
Feb 9, 2024 |
| CVE-2022-42446 |
Starting with Sametime 12, anonymous users are enabled by default
|
6.5
Medium
|
Nov 30, 2022 |