Skip to content
OpenAdvisories

Product · HCL Software

Sametime

11 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.1

    HCL Sametime is vulnerable to an information disclosure

    Users are able to read group conversations without actively taking part in them. Next to one to one conversations, users are able to start group conversations with multiple users. It was found possible to obtain the contents of these group conversations witho…

  • High 8.2

    HCL Sametime is susceptible a file transfer service vulnerability

    User SID can be modified resulting in an Arbitrary File Upload or deletion of directories causing a Denial of Service. When interacting in a normal matter with the Sametime chat application, users hold a cookie containing their session ID (SID). This value is…